--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"}
{"level":"error","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79"}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"error","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59028","PortSpecifier":{"PortValue":59028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59028","PortSpecifier":{"PortValue":59028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151950,"nanos":795154650},"http":{"id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39cad2a-f3af-45fb-9365-a2fc9b1ff312","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42098","PortSpecifier":{"PortValue":42098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42098","PortSpecifier":{"PortValue":42098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151950,"nanos":848289813},"http":{"id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d65e17-3f2d-41f9-9af3-5c1e9df9aad5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59030","PortSpecifier":{"PortValue":59030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","method":"GET","path":"/maas-api/v1/api-keys/7c68b986-c18c-44f6-a5fa-920e3f6c4fe8","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59030","PortSpecifier":{"PortValue":59030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151950,"nanos":901675610},"http":{"id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","method":"GET","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c68b986-c18c-44f6-a5fa-920e3f6c4fe8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7c68b986-c18c-44f6-a5fa-920e3f6c4fe8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a26c7c0-5e96-489e-89fd-fd5314ce56b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42106","PortSpecifier":{"PortValue":42106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59fee917-fabf-4a2d-97a2-981df38e146f","method":"GET","path":"/maas-api/v1/api-keys/13023ea3-5cca-4f0e-8260-3a74f817a750","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42106","PortSpecifier":{"PortValue":42106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151950,"nanos":938558994},"http":{"id":"59fee917-fabf-4a2d-97a2-981df38e146f","method":"GET","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/13023ea3-5cca-4f0e-8260-3a74f817a750",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/13023ea3-5cca-4f0e-8260-3a74f817a750",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59fee917-fabf-4a2d-97a2-981df38e146f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58806","PortSpecifier":{"PortValue":58806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0218e26-504d-46f8-a450-767b3919c2eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58806","PortSpecifier":{"PortValue":58806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151970,"nanos":221509974},"http":{"id":"f0218e26-504d-46f8-a450-767b3919c2eb","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0218e26-504d-46f8-a450-767b3919c2eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51850","PortSpecifier":{"PortValue":51850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d219a746-45af-4cee-8fd4-dd9fb905f362","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51850","PortSpecifier":{"PortValue":51850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151970,"nanos":263988869},"http":{"id":"d219a746-45af-4cee-8fd4-dd9fb905f362","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d219a746-45af-4cee-8fd4-dd9fb905f362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58816","PortSpecifier":{"PortValue":58816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"315ed01c-9335-46cf-85ae-4e1b5e985490","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58816","PortSpecifier":{"PortValue":58816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151970,"nanos":304315034},"http":{"id":"315ed01c-9335-46cf-85ae-4e1b5e985490","method":"GET","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eVXb4YtaAOwRiA6y_3xwHs7jjaH1HGSEidnEXNtGPjVFO2V1hR7DspbIL8dZ"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eVXb4YtaAOwRiA6y_3xwHs7jjaH1HGSEidnEXNtGPjVFO2V1hR7DspbIL8dZ\"}"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9b6c5aa-28ea-4ad0-a3da-7ea901c473c3","keyName":"e2e-auth-iso-a-96163a","subscription":"e2e-auth-iso-c018b8","tenant":"e2e-shared-a-31dfa2","userId":"a9b6c5aa-28ea-4ad0-a3da-7ea901c473c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c018b8"}
{"level":"info","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"315ed01c-9335-46cf-85ae-4e1b5e985490","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e4187a-5e75-429e-b74a-067701715ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42898","PortSpecifier":{"PortValue":42898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e4187a-5e75-429e-b74a-067701715ebb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e4187a-5e75-429e-b74a-067701715ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42898","PortSpecifier":{"PortValue":42898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151987,"nanos":435781882},"http":{"id":"77e4187a-5e75-429e-b74a-067701715ebb","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77e4187a-5e75-429e-b74a-067701715ebb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e4187a-5e75-429e-b74a-067701715ebb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e4187a-5e75-429e-b74a-067701715ebb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e4187a-5e75-429e-b74a-067701715ebb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e4187a-5e75-429e-b74a-067701715ebb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40476","PortSpecifier":{"PortValue":40476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40476","PortSpecifier":{"PortValue":40476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151987,"nanos":476609616},"http":{"id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2a287f7-e3a5-4478-ba10-ac85bc809ad7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40492","PortSpecifier":{"PortValue":40492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40492","PortSpecifier":{"PortValue":40492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151987,"nanos":513830081},"http":{"id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","method":"GET","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JkpasqJOkMjn8nMP_2h2k8MtL6QeCmyhg5p6a5v5IdfQy2mukg44d5S4pIKC"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JkpasqJOkMjn8nMP_2h2k8MtL6QeCmyhg5p6a5v5IdfQy2mukg44d5S4pIKC\"}"}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T21:46:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcdc52e-91f9-4d82-8b6b-624741c6356d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33316","PortSpecifier":{"PortValue":33316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d243b384-dceb-4fc3-9a93-df948acdb484","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33316","PortSpecifier":{"PortValue":33316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152007,"nanos":776446948},"http":{"id":"d243b384-dceb-4fc3-9a93-df948acdb484","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d243b384-dceb-4fc3-9a93-df948acdb484","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51678","PortSpecifier":{"PortValue":51678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51678","PortSpecifier":{"PortValue":51678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152007,"nanos":811715113},"http":{"id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d3ee9b-7e9f-4469-ba85-142215aa91d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152007,"nanos":853160896},"http":{"id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13c4f052-b422-48c3-8dba-2c14cf4a9ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51682","PortSpecifier":{"PortValue":51682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51682","PortSpecifier":{"PortValue":51682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152007,"nanos":896191776},"http":{"id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:46:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67b4f062-2f7c-4173-b27d-10d472eb6d00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43222","PortSpecifier":{"PortValue":43222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1df1497-0e7d-4a47-bb16-37946f64943a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43222","PortSpecifier":{"PortValue":43222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152025,"nanos":24150369},"http":{"id":"b1df1497-0e7d-4a47-bb16-37946f64943a","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1df1497-0e7d-4a47-bb16-37946f64943a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42366","PortSpecifier":{"PortValue":42366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42366","PortSpecifier":{"PortValue":42366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152025,"nanos":66219255},"http":{"id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cddcb33d-3404-4152-bcf5-ddda8753ff01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42372","PortSpecifier":{"PortValue":42372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adf45d26-bc46-4d57-84b2-69230aa70ece","method":"GET","path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42372","PortSpecifier":{"PortValue":42372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152025,"nanos":103691215},"http":{"id":"adf45d26-bc46-4d57-84b2-69230aa70ece","method":"GET","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf45d26-bc46-4d57-84b2-69230aa70ece","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","method":"GET","path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152025,"nanos":137775429},"http":{"id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","method":"GET","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c8ece758-959d-4af0-b492-c27ffb6d8a21",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dd89d93-d3ca-4a70-80e1-579930ee04e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef641968-d41e-4c49-b468-3a7225105a50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55680","PortSpecifier":{"PortValue":55680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef641968-d41e-4c49-b468-3a7225105a50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef641968-d41e-4c49-b468-3a7225105a50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55680","PortSpecifier":{"PortValue":55680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152042,"nanos":287833666},"http":{"id":"ef641968-d41e-4c49-b468-3a7225105a50","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef641968-d41e-4c49-b468-3a7225105a50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef641968-d41e-4c49-b468-3a7225105a50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef641968-d41e-4c49-b468-3a7225105a50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef641968-d41e-4c49-b468-3a7225105a50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef641968-d41e-4c49-b468-3a7225105a50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47640","PortSpecifier":{"PortValue":47640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50424cf0-0d97-4747-8576-159ad0e19aa0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47640","PortSpecifier":{"PortValue":47640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152042,"nanos":325907967},"http":{"id":"50424cf0-0d97-4747-8576-159ad0e19aa0","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/auth-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50424cf0-0d97-4747-8576-159ad0e19aa0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55694","PortSpecifier":{"PortValue":55694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55694","PortSpecifier":{"PortValue":55694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152042,"nanos":363239326},"http":{"id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EGSphVCuuZGoanZe_dsEUogVmSVHnpkBudSeCaHBKey8qx7p75ctbK9zjqKe"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EGSphVCuuZGoanZe_dsEUogVmSVHnpkBudSeCaHBKey8qx7p75ctbK9zjqKe\"}"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"384b6ad7-1711-424e-849b-b80e4b5bb7d4","keyName":"e2e-auth-iso-a-b00fba","subscription":"e2e-auth-iso-cf5af1","tenant":"e2e-shared-a-31dfa2","userId":"384b6ad7-1711-424e-849b-b80e4b5bb7d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/auth-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cf5af1"}
{"level":"info","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b2bf6d-8bd9-4ab8-a8f9-04f433f67d91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"error","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fb371d42df627cc974c1d634bf50031644d8e9c754a2d8ecc2b3585c8b9efa7"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a0372077e5b15a6b946066430d92d417f6ecddbd5c8aba9f071fe22efcfe30"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4011bbcda90c3edc53ddf678a8438a059eab90ff2afa04d62ee23d615125aaa8"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a350f74f960e5d38a1a2014169433193da7222269c9f4468dffedfa0d291fae"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/989b3717a4ad273d5efa52b710db198491150bbbfb4f7835c4123a1e2c890a86"}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1c917372b4415f6b3d1edb86b0ea374235ab929b4b54369cbd57a049210420c"}
{"level":"info","ts":"2026-07-15T21:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f6e44b15c4fc2337a45d525301bd5cea62fbd31497e798a57b5c0d7b1749f6"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f404630481610159df8cd514cf794ec325d80eba8c15db6791fbdc152c560a98"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1cac87f6194be75f05ca7073960ba825155867426bd297a51ed830f10cd8b41"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732d76fa5b71e6f7dcadf267d102a047a9f2e8dbec83b02b25d880adbf240ef4"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a70b4792ecf93e9644ae2be62c8d4bf1424253bc9a9117888e9f4a06f0376282"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c47faf67eea760ba1606bc965ea0a2bd133c529e579bcb6569c5d631d80e1491"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a4368b1b065d12417ef409e80a9765cfacab408ac19b94a9d72dcdcbef1cb51"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15a379edd670895c00fd9c83f38da98b11b720de46f7e7d6c4948fb234228926"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee6aea8b7a810bffb304f1cd3fde89601f9f2696d8bf0f115c18d52c9505ec2"}
{"level":"info","ts":"2026-07-15T21:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02dbf8c982a184dbedffc3937052d2ea512811b0e651ab836cf76176034aea79"}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:47:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:47:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:47:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:47:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"error","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"error","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafd822bc107f4cada08ac585d4a80121d9c64426d17b3045fe106a46d59b686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafd822bc107f4cada08ac585d4a80121d9c64426d17b3045fe106a46d59b686"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fcf7f08b69ac25a19b3da60adee290dbd624431839030d7f44cfdfa33dce4dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcf7f08b69ac25a19b3da60adee290dbd624431839030d7f44cfdfa33dce4dc"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"error","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"error","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8a40ad62cc4ee06b01828a432bb1e9fc2347192628ba7c5f4d6b9b3f89a460d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:48:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a40ad62cc4ee06b01828a432bb1e9fc2347192628ba7c5f4d6b9b3f89a460d"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"}
{"level":"debug","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda49af5ae2087ae346b190c61e88699ed9d363697e10bccea1865affd54c3c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"info","ts":"2026-07-15T21:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda49af5ae2087ae346b190c61e88699ed9d363697e10bccea1865affd54c3c6"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4eda61-116b-40de-a640-351da52398ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51082","PortSpecifier":{"PortValue":51082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e4eda61-116b-40de-a640-351da52398ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4eda61-116b-40de-a640-351da52398ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51082","PortSpecifier":{"PortValue":51082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152105,"nanos":125730139},"http":{"id":"4e4eda61-116b-40de-a640-351da52398ec","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e4eda61-116b-40de-a640-351da52398ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e4eda61-116b-40de-a640-351da52398ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/sub-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4eda61-116b-40de-a640-351da52398ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4eda61-116b-40de-a640-351da52398ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4eda61-116b-40de-a640-351da52398ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44854","PortSpecifier":{"PortValue":44854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44854","PortSpecifier":{"PortValue":44854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152105,"nanos":174156416},"http":{"id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/sub-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0472a5d-0dd3-4b0b-a4cd-eca5df98351d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60abcc0f-1395-4739-8366-af22936d1741","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51094","PortSpecifier":{"PortValue":51094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60abcc0f-1395-4739-8366-af22936d1741","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60abcc0f-1395-4739-8366-af22936d1741","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51094","PortSpecifier":{"PortValue":51094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152105,"nanos":217042333},"http":{"id":"60abcc0f-1395-4739-8366-af22936d1741","method":"GET","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HQLQ0uiiveGZL5ZE_aV6Sq42Uruxq4rBEZogbFkQr0wU54zYW85gEwk0t9jg"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HQLQ0uiiveGZL5ZE_aV6Sq42Uruxq4rBEZogbFkQr0wU54zYW85gEwk0t9jg\"}"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c8e800-bbd3-4045-846e-e010ad1d20c6","keyName":"e2e-sub-iso-fccc8e","subscription":"e2e-a-only-391887","tenant":"e2e-shared-a-31dfa2","userId":"f0c8e800-bbd3-4045-846e-e010ad1d20c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60abcc0f-1395-4739-8366-af22936d1741","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/sub-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60abcc0f-1395-4739-8366-af22936d1741","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-391887"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60abcc0f-1395-4739-8366-af22936d1741","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60abcc0f-1395-4739-8366-af22936d1741","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44862","PortSpecifier":{"PortValue":44862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44862","PortSpecifier":{"PortValue":44862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152105,"nanos":258488298},"http":{"id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","method":"GET","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oNRY91L7Ws6bPGvT_oVvyDi1UcCAwZe0kdnCv8jlWx4snULZ2Zf8vP5iqqkH"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oNRY91L7Ws6bPGvT_oVvyDi1UcCAwZe0kdnCv8jlWx4snULZ2Zf8vP5iqqkH\"}"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d8ba7a52-5eac-49fe-8bba-72b35cb6b6d5","keyName":"e2e-sub-iso-eb35d9","subscription":"e2e-b-only-391887","tenant":"e2e-shared-b-b7f88c","userId":"d8ba7a52-5eac-49fe-8bba-72b35cb6b6d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/sub-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-391887"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c39d3678-fbf3-4a9e-bc8b-ceb5d0f9382c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43526","PortSpecifier":{"PortValue":43526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43526","PortSpecifier":{"PortValue":43526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152125,"nanos":880923484},"http":{"id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/sub-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79b6a757-639b-4d58-af75-a71f3c8bd22a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152125,"nanos":920269827},"http":{"id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/sub-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba87ea96-d583-477a-9aa1-ac2787d3e001","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43542","PortSpecifier":{"PortValue":43542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43542","PortSpecifier":{"PortValue":43542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152125,"nanos":957687579},"http":{"id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11BibQVe8JlM4rbBG_a1f0aPuRF0ESP8rS6o5KnLgOpPfekNVfngANfSrXsoP"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11BibQVe8JlM4rbBG_a1f0aPuRF0ESP8rS6o5KnLgOpPfekNVfngANfSrXsoP\"}"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7bb60bd-4e41-4e89-9c26-6c767bee6e9a","keyName":"e2e-sub-iso-f4ad91","subscription":"e2e-shared-sub-1bc33d","tenant":"e2e-shared-a-31dfa2","userId":"a7bb60bd-4e41-4e89-9c26-6c767bee6e9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/sub-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1bc33d"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cce5cb08-0a94-40be-aa1d-906d3c9f506d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49226","PortSpecifier":{"PortValue":49226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49226","PortSpecifier":{"PortValue":49226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152125,"nanos":987380604},"http":{"id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13pzJURyIf0XUqRK7_bUNbldcieXZDFmldz7KIxcc0kkwFA095v9bjYG14qJI"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13pzJURyIf0XUqRK7_bUNbldcieXZDFmldz7KIxcc0kkwFA095v9bjYG14qJI\"}"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c64213-ace1-4a0a-820c-e61099ccc58e","keyName":"e2e-sub-iso-4a7f14","subscription":"e2e-shared-sub-1bc33d","tenant":"e2e-shared-b-b7f88c","userId":"c2c64213-ace1-4a0a-820c-e61099ccc58e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/sub-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1bc33d"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:48:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91b91a5b-0f6c-4854-8a40-0a8b5ab51544","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aec74ae84d35e72a935be3a6013706d17de22fc04031394442709918b6679f90"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c30461b4b2cc2ae55cbab73fd47a0d98050070a67e134aacd3699b47affeb8af"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7acee0540fa019dc2222ca1fe180e6896141c23be4cd81f2193c756f60ca2b65"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fed4da8da690511ae59d5c322263b5490323f1039fb9bab5d06efcc452ea097"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6d964a6e3dfea44b75202ecd54fb9e22c800d61d8624bdb9152c1612741ed00"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb065c9fc3d9eb5317fb26f642b56257e47e961135b75d78699116a48653e776"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f143fcb60fd5f273139ace6a87ab9d840c211e1ee53d983280792527a6c6c14d"}
{"level":"info","ts":"2026-07-15T21:48:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e30d228fc14e3041339e7b8f085b2695ab186eb0297295123c4a66403a5372d"}
{"level":"debug","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"}
{"level":"debug","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"}
{"level":"debug","ts":"2026-07-15T21:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97fb48cb5bf33eb5a89917849a1ff3f651faa3f4108b39fdb55474c5661e43cc"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66f09f3df30cdc62755add58cbfe871947303156329b3149078dc9f67807036c"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58192e0299ee040945f637b7395e940e14dce2e9a5ac6763befff1706ee070d6"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c1e80596ff6490c3cfb52953d0ba9626b967ec2b419e56515a9a12a354e6680"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7731c966774052601388a6829b8900e3eaf086f3bb5c4dd64e81e2b391717cde"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b477d511b00299499b55cdb4c1f8b4e26e1d6599524a09466dca9e0750cad2ed"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bd9748d2820951b3aeec082e7584426a226ddae49989f53978c9347f611ee16"}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af23eeaa189d96174da5a9d37febfe1918ae255ccb3ddfbee9aca97accc0b26b"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"error","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"error","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"error","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"error","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"error","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafd822bc107f4cada08ac585d4a80121d9c64426d17b3045fe106a46d59b686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"error","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafd822bc107f4cada08ac585d4a80121d9c64426d17b3045fe106a46d59b686"}
{"level":"error","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"error","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8a40ad62cc4ee06b01828a432bb1e9fc2347192628ba7c5f4d6b9b3f89a460d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8a40ad62cc4ee06b01828a432bb1e9fc2347192628ba7c5f4d6b9b3f89a460d"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"debug","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:49:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda49af5ae2087ae346b190c61e88699ed9d363697e10bccea1865affd54c3c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda49af5ae2087ae346b190c61e88699ed9d363697e10bccea1865affd54c3c6"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fcf7f08b69ac25a19b3da60adee290dbd624431839030d7f44cfdfa33dce4dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcf7f08b69ac25a19b3da60adee290dbd624431839030d7f44cfdfa33dce4dc"}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"info","ts":"2026-07-15T21:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152184,"nanos":91411863},"http":{"id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c06aa77-8b64-4b7d-9c4d-89d528056ea2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47460","PortSpecifier":{"PortValue":47460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21da438e-c066-428e-b86d-ba24f3f055f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47460","PortSpecifier":{"PortValue":47460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152184,"nanos":133783737},"http":{"id":"21da438e-c066-428e-b86d-ba24f3f055f1","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21da438e-c066-428e-b86d-ba24f3f055f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34226","PortSpecifier":{"PortValue":34226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34226","PortSpecifier":{"PortValue":34226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152184,"nanos":176281438},"http":{"id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97\"}"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","subscription":"e2e-rate-iso-a-bdfd84","tenant":"e2e-shared-a-31dfa2","userId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-bdfd84\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdfd84"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","selected_subscription":"e2e-rate-iso-a-bdfd84","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-bdfd84@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"627f1ce5-aa3b-4263-b9bf-a0df4174f60d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34240","PortSpecifier":{"PortValue":34240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34240","PortSpecifier":{"PortValue":34240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152185,"nanos":230194432},"http":{"id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97\"}"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","subscription":"e2e-rate-iso-a-bdfd84","tenant":"e2e-shared-a-31dfa2","userId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-bdfd84\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdfd84"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","selected_subscription":"e2e-rate-iso-a-bdfd84","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-bdfd84@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"921dc7f0-1a77-453d-8f1f-28f0eb7e3f6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34254","PortSpecifier":{"PortValue":34254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34254","PortSpecifier":{"PortValue":34254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152186,"nanos":272703139},"http":{"id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KehC5KcCNX756b5H_36NCGHTKbbxfHIwPzd34cG6GQKpVKkpjLMYOD9HUi97\"}"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","subscription":"e2e-rate-iso-a-bdfd84","tenant":"e2e-shared-a-31dfa2","userId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-bdfd84\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bdfd84"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"395e6c33-8a72-4c1a-80fd-c1b62f19879d","keyName":"e2e-rate-a-bdfd84","selected_subscription":"e2e-rate-iso-a-bdfd84","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-bdfd84@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bdfd84","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946679d2-03ab-4b5c-a656-8a1268dd77c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55420","PortSpecifier":{"PortValue":55420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55420","PortSpecifier":{"PortValue":55420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152197,"nanos":67553464},"http":{"id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971cb3c0-7972-4c3a-991b-2bdc73dd4580","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39860","PortSpecifier":{"PortValue":39860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39860","PortSpecifier":{"PortValue":39860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152197,"nanos":104799767},"http":{"id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"527f7d82-a8b7-4423-8398-082949df41d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"]}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b901c7009105"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d9781e5d-21e2-416f-a9ca-8d6c6699c4f4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"527f7d82-a8b7-4423-8398-082949df41d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342d5db1-ed34-4051-992d-4ac2c8f8ed38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55436","PortSpecifier":{"PortValue":55436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55436","PortSpecifier":{"PortValue":55436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152197,"nanos":139968046},"http":{"id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"078e30ce-6a29-4c36-a0b0-4f20ba2e953f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aec3fce1-0c70-4b87-8fde-23681304ad24","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152198,"nanos":179786434},"http":{"id":"aec3fce1-0c70-4b87-8fde-23681304ad24","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec3fce1-0c70-4b87-8fde-23681304ad24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49518","PortSpecifier":{"PortValue":49518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49518","PortSpecifier":{"PortValue":49518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152199,"nanos":221235926},"http":{"id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8131ee-4f10-4897-b9e2-e2928a45b06a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b0004d-719e-49a6-837b-0bab9759b636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49526","PortSpecifier":{"PortValue":49526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b0004d-719e-49a6-837b-0bab9759b636","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b0004d-719e-49a6-837b-0bab9759b636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49526","PortSpecifier":{"PortValue":49526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152200,"nanos":261699607},"http":{"id":"98b0004d-719e-49a6-837b-0bab9759b636","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b0004d-719e-49a6-837b-0bab9759b636","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b0004d-719e-49a6-837b-0bab9759b636","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b0004d-719e-49a6-837b-0bab9759b636","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b0004d-719e-49a6-837b-0bab9759b636","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152201,"nanos":308024741},"http":{"id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a0d377a-bdc4-4a74-a684-a78c70ba4d11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49544","PortSpecifier":{"PortValue":49544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02e0f7c3-c7de-416c-a962-a3879cab657e","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49544","PortSpecifier":{"PortValue":49544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152202,"nanos":394384925},"http":{"id":"02e0f7c3-c7de-416c-a962-a3879cab657e","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:50:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e0f7c3-c7de-416c-a962-a3879cab657e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49556","PortSpecifier":{"PortValue":49556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9264748a-e626-4164-b5cc-d6f6d633a680","method":"POST","path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions","host":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49556","PortSpecifier":{"PortValue":49556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152203,"nanos":442903347},"http":{"id":"9264748a-e626-4164-b5cc-d6f6d633a680","method":"POST","headers":{":authority":"e2e-shared-a-31dfa2.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QVGsOSNSrXg6iV0i_GpbaqIgwE0dqbJMlSmiOmouJ3JvG7dRojhifq4JCSV8\"}"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","subscription":"e2e-rate-iso-a-7703aa","tenant":"e2e-shared-a-31dfa2","userId":"3ef32ca6-886a-406a-b7d4-db4347107d16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\",\"requestedSubscription\":\"e2e-rate-iso-a-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-31dfa2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-31dfa2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7703aa"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3ef32ca6-886a-406a-b7d4-db4347107d16","keyName":"e2e-rate-a-7703aa","selected_subscription":"e2e-rate-iso-a-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-a-31dfa2/e2e-rate-iso-a-7703aa@ai-tenant-e2e-shared-a-31dfa2/rate-test-model-31dfa2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31dfa2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7703aa","namespace":"ai-tenant-e2e-shared-a-31dfa2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9264748a-e626-4164-b5cc-d6f6d633a680","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37870","PortSpecifier":{"PortValue":37870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c82ac150-6357-4437-a501-4f4710bdc6f5","method":"POST","path":"/ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c/v1/completions","host":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37870","PortSpecifier":{"PortValue":37870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784152203,"nanos":480658445},"http":{"id":"c82ac150-6357-4437-a501-4f4710bdc6f5","method":"POST","headers":{":authority":"e2e-shared-b-b7f88c.apps.b6d75401-0fbb-4fc9-8914-b901c7009105.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WO1dmRZOJJWG2xyH_OcCEO6XAhgmFrT4zZamKWQiofg8duMWtB02AIDKP1Ml"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WO1dmRZOJJWG2xyH_OcCEO6XAhgmFrT4zZamKWQiofg8duMWtB02AIDKP1Ml\"}"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"766564fc-a0da-4ef8-b10a-6fc4f5004fbd","keyName":"e2e-rate-b-7703aa","subscription":"e2e-rate-iso-b-7703aa","tenant":"e2e-shared-b-b7f88c","userId":"766564fc-a0da-4ef8-b10a-6fc4f5004fbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c\",\"requestedSubscription\":\"e2e-rate-iso-b-7703aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b7f88c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b7f88c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7703aa","namespace":"ai-tenant-e2e-shared-b-b7f88c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b7f88c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7703aa"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"766564fc-a0da-4ef8-b10a-6fc4f5004fbd","keyName":"e2e-rate-b-7703aa","selected_subscription":"e2e-rate-iso-b-7703aa","selected_subscription_key":"ai-tenant-e2e-shared-b-b7f88c/e2e-rate-iso-b-7703aa@ai-tenant-e2e-shared-b-b7f88c/rate-test-model-b7f88c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b7f88c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7703aa","namespace":"ai-tenant-e2e-shared-b-b7f88c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T21:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82ac150-6357-4437-a501-4f4710bdc6f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/715dde62abc13206234835a748d972c64ff3675ef235a3fbe375fbd486cbc8c8"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e636fd61984b6d987234d4fab6a48cac56dd17f5781dc74f16c0cf9995ff20d7"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f69ad40639c4730c6df6b237dc349f5aa079c0cb7fe58e75261c7af0f2e2f98c"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5791e6482ddbb6461f92a678da520c3237bb38d9c379ce8f7817488e7b65aa0"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b387a9d571fd40076853029b7fcd4b14d0912233a039f282e0b39ec7feb79bb"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0759341cdfca628809ec7b301f893cb15612502fa7616b44e4c439f7a8460418"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc0fb8175522b08328994811b4d37a1daf1f781f2671bca70c9e3024c110c10"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f39ac9c3dcb5e5ac8f5496ef2ad65e4151f638771c73b776f3a966826dd43d9"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6b4dc464202a9f43ae93aa51bed0bbca3636829e0a97c97e0e7b4bdca16d716"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/884365d8e7421eb72a3101174959506ee34f3068836cabc1a8451a7cde54fc55"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e256e92ff9d3273d4305834ae9f6c89910dba634e2d1ffce5a9de1b536e99afd"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e793460807c59b694195bbbbdba10cc1bd1bf438d7ebc2e1de497e37ed542e3"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17c69c3f20da6756b56cbdd62ff893dfbde30eb988df9a0b0d7565fedafe0ea0"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5937b3f1002b4950aa303baf63dc475e947688e8c9744d45f0c34cb29e054edf"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f90f45c060871066e85ddf3ccbc094a7cc10f18e6507ddb79af83e6d564cb25"}
{"level":"info","ts":"2026-07-15T21:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4db7a874e379cb11c5c42ce9586a5a811b3cafe5efeaec25e8bcf44ff243117"}
{"level":"info","ts":"2026-07-15T21:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e90bae4f754c8043584fa7fe0460a4d4205d1830777d8ac991d35f545405bff8"}
{"level":"info","ts":"2026-07-15T21:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fcf7f08b69ac25a19b3da60adee290dbd624431839030d7f44cfdfa33dce4dc"}
{"level":"info","ts":"2026-07-15T21:50:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda49af5ae2087ae346b190c61e88699ed9d363697e10bccea1865affd54c3c6"}
{"level":"info","ts":"2026-07-15T21:50:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cafd822bc107f4cada08ac585d4a80121d9c64426d17b3045fe106a46d59b686"}
{"level":"info","ts":"2026-07-15T21:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4054328667029427000b212798dd40c3b0b391e6efb297672e875884ae47020"}
{"level":"info","ts":"2026-07-15T21:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a40ad62cc4ee06b01828a432bb1e9fc2347192628ba7c5f4d6b9b3f89a460d"}
{"level":"info","ts":"2026-07-15T21:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e2fac29076b87bc859b8f7fdeb2192f9dd01ac9bc83d38dc4d70cafa64431a2"}
{"level":"info","ts":"2026-07-15T21:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daa7138d16a37699902d26418e5f10adef084410dbb21636e5f9112fd15212d3"}