--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252"}
{"level":"error","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead"}
{"level":"error","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead"}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13"}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b"}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577"}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13"}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577"}
{"level":"debug","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"}
{"level":"info","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"}
{"level":"info","ts":"2026-07-15T12:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"error","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142"}
{"level":"error","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:55:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881"}
{"level":"info","ts":"2026-07-15T12:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55286","PortSpecifier":{"PortValue":55286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55286","PortSpecifier":{"PortValue":55286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120117,"nanos":863424833},"http":{"id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2e1f08-9cad-413e-ab1f-734517ea74ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"632b294c-e8c5-4e42-9315-59d22c5df02b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120117,"nanos":927963675},"http":{"id":"632b294c-e8c5-4e42-9315-59d22c5df02b","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632b294c-e8c5-4e42-9315-59d22c5df02b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55294","PortSpecifier":{"PortValue":55294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","method":"GET","path":"/maas-api/v1/api-keys/aea72ed1-158b-4b44-9dca-4a65acc93a8b","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55294","PortSpecifier":{"PortValue":55294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120117,"nanos":988887767},"http":{"id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","method":"GET","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aea72ed1-158b-4b44-9dca-4a65acc93a8b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aea72ed1-158b-4b44-9dca-4a65acc93a8b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a99a60b-b30c-4fe7-9d33-bf0ca8a76e57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","method":"GET","path":"/maas-api/v1/api-keys/92fa8ddd-7809-4844-ac90-4f43bf748813","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120118,"nanos":24623277},"http":{"id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","method":"GET","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92fa8ddd-7809-4844-ac90-4f43bf748813",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92fa8ddd-7809-4844-ac90-4f43bf748813",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f26c073-ef9f-4ddf-b68e-f331ff777ff2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6dba95a-8428-40e7-99c5-c86a18924897","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120135,"nanos":194262111},"http":{"id":"f6dba95a-8428-40e7-99c5-c86a18924897","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6dba95a-8428-40e7-99c5-c86a18924897","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91746cd1-078b-46df-ae7b-d232121886df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40310","PortSpecifier":{"PortValue":40310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91746cd1-078b-46df-ae7b-d232121886df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91746cd1-078b-46df-ae7b-d232121886df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40310","PortSpecifier":{"PortValue":40310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120135,"nanos":233015278},"http":{"id":"91746cd1-078b-46df-ae7b-d232121886df","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91746cd1-078b-46df-ae7b-d232121886df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91746cd1-078b-46df-ae7b-d232121886df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91746cd1-078b-46df-ae7b-d232121886df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91746cd1-078b-46df-ae7b-d232121886df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91746cd1-078b-46df-ae7b-d232121886df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57084","PortSpecifier":{"PortValue":57084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57084","PortSpecifier":{"PortValue":57084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120135,"nanos":280827741},"http":{"id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","method":"GET","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OOHipukgPdjaopg5_qH9nKw7E1V8OVUz8jFJCiTYasuzc8DPiQyVbVrM94m8"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OOHipukgPdjaopg5_qH9nKw7E1V8OVUz8jFJCiTYasuzc8DPiQyVbVrM94m8\"}"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6dd3ce81-3ea5-4a8e-94a6-f29ac3c66476","keyName":"e2e-auth-iso-a-6352f6","subscription":"e2e-auth-iso-65291a","tenant":"e2e-shared-a-e6c75d","userId":"6dd3ce81-3ea5-4a8e-94a6-f29ac3c66476","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-65291a"}
{"level":"info","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b2a99d-4915-4d35-adf2-1dda6dda7882","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49566","PortSpecifier":{"PortValue":49566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49566","PortSpecifier":{"PortValue":49566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120152,"nanos":431715896},"http":{"id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9cef993-6793-410f-bf9f-dfedd37c2fe0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47940","PortSpecifier":{"PortValue":47940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47940","PortSpecifier":{"PortValue":47940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120152,"nanos":471678298},"http":{"id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7821190c-4654-4b6f-93c3-ecc6c7fea165","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052373a7-115f-4b41-9b1b-2f746f629972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47944","PortSpecifier":{"PortValue":47944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"052373a7-115f-4b41-9b1b-2f746f629972","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052373a7-115f-4b41-9b1b-2f746f629972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47944","PortSpecifier":{"PortValue":47944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120152,"nanos":509016075},"http":{"id":"052373a7-115f-4b41-9b1b-2f746f629972","method":"GET","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"052373a7-115f-4b41-9b1b-2f746f629972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K4pC0TxLC10Okdkp_nHzLuIMLcYPTG0a4Dv2Uxt1CqSyHWoiJzxhroYbJsmS"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"052373a7-115f-4b41-9b1b-2f746f629972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K4pC0TxLC10Okdkp_nHzLuIMLcYPTG0a4Dv2Uxt1CqSyHWoiJzxhroYbJsmS\"}"}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"052373a7-115f-4b41-9b1b-2f746f629972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"052373a7-115f-4b41-9b1b-2f746f629972","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052373a7-115f-4b41-9b1b-2f746f629972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"052373a7-115f-4b41-9b1b-2f746f629972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052373a7-115f-4b41-9b1b-2f746f629972","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T12:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052373a7-115f-4b41-9b1b-2f746f629972","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33546","PortSpecifier":{"PortValue":33546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33546","PortSpecifier":{"PortValue":33546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120169,"nanos":624654251},"http":{"id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8eeaeac-8470-477a-96d9-dfb4d196236e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53388","PortSpecifier":{"PortValue":53388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86c89bcd-77c6-48fc-9119-76a707f939c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53388","PortSpecifier":{"PortValue":53388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120169,"nanos":661258223},"http":{"id":"86c89bcd-77c6-48fc-9119-76a707f939c5","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86c89bcd-77c6-48fc-9119-76a707f939c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33560","PortSpecifier":{"PortValue":33560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33560","PortSpecifier":{"PortValue":33560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120169,"nanos":702092080},"http":{"id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0b0ea1-68ee-4ebd-ac4a-01faac873cde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120169,"nanos":739695286},"http":{"id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13062cb9-f31c-4da2-8f48-ec216d2d7c4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57282","PortSpecifier":{"PortValue":57282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57282","PortSpecifier":{"PortValue":57282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120186,"nanos":866129377},"http":{"id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a4efa7-63c1-4fd5-b818-89de3b5c3237","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51716","PortSpecifier":{"PortValue":51716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4511653d-f7e3-4edb-b905-43b74be227cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51716","PortSpecifier":{"PortValue":51716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120186,"nanos":899900250},"http":{"id":"4511653d-f7e3-4edb-b905-43b74be227cf","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4511653d-f7e3-4edb-b905-43b74be227cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51718","PortSpecifier":{"PortValue":51718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","method":"GET","path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51718","PortSpecifier":{"PortValue":51718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120186,"nanos":940531142},"http":{"id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","method":"GET","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d841265-d73b-44f4-8064-30ca77d1ffd6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57298","PortSpecifier":{"PortValue":57298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c224e297-639a-4c6e-90c9-79f1105f2740","method":"GET","path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57298","PortSpecifier":{"PortValue":57298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120186,"nanos":977234074},"http":{"id":"c224e297-639a-4c6e-90c9-79f1105f2740","method":"GET","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0fbde71c-9c32-4e34-83dd-61feea220c74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c224e297-639a-4c6e-90c9-79f1105f2740","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38190","PortSpecifier":{"PortValue":38190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"853591db-36bb-4346-a1dc-b6a641e120c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38190","PortSpecifier":{"PortValue":38190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120206,"nanos":265755733},"http":{"id":"853591db-36bb-4346-a1dc-b6a641e120c2","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"853591db-36bb-4346-a1dc-b6a641e120c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34806","PortSpecifier":{"PortValue":34806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34806","PortSpecifier":{"PortValue":34806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120206,"nanos":310050155},"http":{"id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/auth-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a81e8214-77f2-4bb9-b508-ed0edd16c96d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38202","PortSpecifier":{"PortValue":38202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38202","PortSpecifier":{"PortValue":38202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120206,"nanos":344429119},"http":{"id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ILjVwh2pGAvtSy38_H0BM0HfUA7v61mhBJ97flM0y5FZNZp6GztQAERYApKB"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ILjVwh2pGAvtSy38_H0BM0HfUA7v61mhBJ97flM0y5FZNZp6GztQAERYApKB\"}"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ecbbd74-8038-45aa-aa57-ae636ade9492","keyName":"e2e-auth-iso-a-c1f6f5","subscription":"e2e-auth-iso-580c5c","tenant":"e2e-shared-a-e6c75d","userId":"0ecbbd74-8038-45aa-aa57-ae636ade9492","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/auth-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-580c5c"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:56:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fb1bf5-9809-449e-bdc6-d1b18c331090","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5ac0986c4d9853b332bb56db0f57a8681c2156c74e362caf033d4cb4d728577"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02eca994f72c54ce0642565c94f5d0b5719f5ecaf5d71c6483190bf625c9cead"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea4289845c26463fb4e5781525eca21b599572d7afe83606cae422e7f76956d6"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8637c472e08d68511aee4533812f4d1f695d55ad76e1d4563e9a56f956db758a"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de4a3e6e4665c3b607a565c6375ad9c767e4965ac780e824668de48dacf18881"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e449db35ee50dc8e5ea7e5d2aa0a42a8951075f1adae0ff61ff688403bf5484c"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a6f84093a6682c1c6e0573038c46efd8185f0acffe6937528851976bda53fa"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44201e71347acffe51f048a22434b54ccd2ea944c2868ae4e018bb1679106656"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99bb41f991a8376f61cd9c858c792975a406c6845ceff62f5920307493575f79"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9d09396b59befbdf68e1b22bc70da60f93b246e16b7f6a1881991bdc9e03c9b"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899859b05845882029fc2f0d43aca8768c222f5df4199fb83f6010fa028dc142"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1325113dc1a92279c0fb0ff0c9662271171264f2038f350e2cabfa255a58a91"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef4419bf33e2cb404e6dacaf5c834745713eaf5c3d065a4588a10978e1dfd972"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c87726fa73cc9632863f95a4cbb74db12f2a463ba472aa16c156560ecd6f6e13"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a0da36e02106ee46e47c59a471435b14dfece4aa10edfa8cbfe71d523cd1abd"}
{"level":"info","ts":"2026-07-15T12:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113a216aa8cb80a7127c947cfd82b260887d7f9b16dbabe66d1269d572982252"}
{"level":"debug","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"}
{"level":"error","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"error","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612"}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"error","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:57:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"error","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a159d6e9798c67416d3ef1a1b3502142468fe362955a485651e060eedd301c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a159d6e9798c67416d3ef1a1b3502142468fe362955a485651e060eedd301c3"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"}
{"level":"info","ts":"2026-07-15T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120292,"nanos":575521058},"http":{"id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/sub-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33157fd7-35e3-40cd-925e-a390dfd3fe8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46988","PortSpecifier":{"PortValue":46988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61111e27-0e33-4801-8d46-b8ea49331f4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46988","PortSpecifier":{"PortValue":46988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120292,"nanos":618784484},"http":{"id":"61111e27-0e33-4801-8d46-b8ea49331f4f","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/sub-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61111e27-0e33-4801-8d46-b8ea49331f4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c82dc9e3-6701-4dda-8834-b319160dd382","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120292,"nanos":663127693},"http":{"id":"c82dc9e3-6701-4dda-8834-b319160dd382","method":"GET","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19yhRsj60TjRxRdNy_BgGME5eM4tyITLkrGTFIRwbMENiBCwcGF12QWiBlj0w"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19yhRsj60TjRxRdNy_BgGME5eM4tyITLkrGTFIRwbMENiBCwcGF12QWiBlj0w\"}"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ccedd53-9a4b-42d9-9356-15267b4455e7","keyName":"e2e-sub-iso-aa2a2d","subscription":"e2e-a-only-0e3dda","tenant":"e2e-shared-a-e6c75d","userId":"2ccedd53-9a4b-42d9-9356-15267b4455e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/sub-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0e3dda"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82dc9e3-6701-4dda-8834-b319160dd382","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46998","PortSpecifier":{"PortValue":46998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d90da470-ac78-4060-ac14-2fc20595dd40","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46998","PortSpecifier":{"PortValue":46998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120292,"nanos":710227808},"http":{"id":"d90da470-ac78-4060-ac14-2fc20595dd40","method":"GET","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HrYbbd72uN5YSzOP_mKCKSN1OZY71UrudDgYqbw1Pt44QlM58yV1MK24VhhW"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HrYbbd72uN5YSzOP_mKCKSN1OZY71UrudDgYqbw1Pt44QlM58yV1MK24VhhW\"}"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f9b71361-79a1-4f18-b4da-b3f34436f01e","keyName":"e2e-sub-iso-739fb2","subscription":"e2e-b-only-0e3dda","tenant":"e2e-shared-b-dc94b0","userId":"f9b71361-79a1-4f18-b4da-b3f34436f01e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/sub-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0e3dda"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d90da470-ac78-4060-ac14-2fc20595dd40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48392","PortSpecifier":{"PortValue":48392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48392","PortSpecifier":{"PortValue":48392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120311,"nanos":286798024},"http":{"id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/sub-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60320cc3-eb6f-4c0d-ab0a-8865a8d2fb28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36218","PortSpecifier":{"PortValue":36218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36218","PortSpecifier":{"PortValue":36218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120311,"nanos":327710800},"http":{"id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/sub-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d6c18f4-6279-4656-bed2-0111c895ec5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48396","PortSpecifier":{"PortValue":48396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd59591e-3cf8-4a34-ad60-e930f4082955","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48396","PortSpecifier":{"PortValue":48396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120311,"nanos":363202545},"http":{"id":"bd59591e-3cf8-4a34-ad60-e930f4082955","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sl2itSeXdYzTcwEd_YTRFSupdZTaeUKDdecRS5OsHBzsXTpPTYbWao4NVAUh"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sl2itSeXdYzTcwEd_YTRFSupdZTaeUKDdecRS5OsHBzsXTpPTYbWao4NVAUh\"}"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db2831e1-b1d6-4722-b8a6-8caaae0575f2","keyName":"e2e-sub-iso-0d6ce3","subscription":"e2e-shared-sub-bf8dd6","tenant":"e2e-shared-a-e6c75d","userId":"db2831e1-b1d6-4722-b8a6-8caaae0575f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/sub-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bf8dd6"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd59591e-3cf8-4a34-ad60-e930f4082955","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36224","PortSpecifier":{"PortValue":36224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36224","PortSpecifier":{"PortValue":36224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120311,"nanos":396979956},"http":{"id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vB1GiAklH7NPiuow_RmytoII1qFxLvUUADYmbMeKOQYigfkygwacpBij4m1e"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vB1GiAklH7NPiuow_RmytoII1qFxLvUUADYmbMeKOQYigfkygwacpBij4m1e\"}"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"455b418f-24f1-4471-90aa-d35e33204e6d","keyName":"e2e-sub-iso-eec8b9","subscription":"e2e-shared-sub-bf8dd6","tenant":"e2e-shared-b-dc94b0","userId":"455b418f-24f1-4471-90aa-d35e33204e6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/sub-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bf8dd6"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcf49ab6-3a29-4d25-a9db-ee283610f34b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58095ddf6f072de32f68820db16df863366cb71332945c808f95eefb133dec69"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b50d672246565f381019c7ea3e9c1bd327fdf9d600692355b45730cbf88f1a8c"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fd8aa829cd50d101a92f2ae126e1d365fe3dff7b8b0f94b850fca9e93c064d1"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4b47510c2c7c139d97cb5d4cd21df27f13597eb42b64ffac01ff24278b63f9e"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d864c584375a35e5308d581f464f1303841ec9e8283535c5b29e308ebed354b2"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b15e86381e6f4d49426bb746721927ed33b2bdd16c898e509437c267c063b378"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc85a132d485d0449dd2779d55ad90be3708f88c7d236b03af9ff7761eab5612"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a1b029269f2d040abbb8b9b84924e2a7c12310ba6af208a13d542e9cb4a334"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e36e25c1461477c2d1971270cb7d5f1131360f3c57d45ed35b9810b28dd80c8b"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3620744254c0760fc1cf3ce4a3d20421693ee4866a7bf4125329ced677b65483"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/726380d7bdd5f33b4e109cb25e05a4f71a16436996afffb97ffa2ab0319e99d0"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab9d87bd72c102a9a392b21f422cec479c03674c488bac2dff9d7942a59182be"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16cdbeadd3be33f2e92dadba8ed147c40f6752bee77ac92da4a2fab3b4923f9c"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39be6550ac25a02d2b2b6673abf116b8c880eb45e5d7394bc80908594788b719"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56e4d58a30f57f95608da55c498f0ba0fe247c9b424b1e062e3fdbad2a0b927e"}
{"level":"info","ts":"2026-07-15T12:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63fda7fae7b00786560e51a7a10cf2a01bd7e944b39f1569277bf7796a9c29fb"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"}
{"level":"error","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"error","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:58:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"error","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"error","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a159d6e9798c67416d3ef1a1b3502142468fe362955a485651e060eedd301c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a159d6e9798c67416d3ef1a1b3502142468fe362955a485651e060eedd301c3"}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T12:59:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"debug","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"info","ts":"2026-07-15T12:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"}
{"level":"debug","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a"}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T12:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45750","PortSpecifier":{"PortValue":45750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61802e34-1a7f-446f-9fb0-594a9ef40610","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45750","PortSpecifier":{"PortValue":45750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120374,"nanos":602381295},"http":{"id":"61802e34-1a7f-446f-9fb0-594a9ef40610","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61802e34-1a7f-446f-9fb0-594a9ef40610","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52516","PortSpecifier":{"PortValue":52516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52516","PortSpecifier":{"PortValue":52516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120374,"nanos":646187649},"http":{"id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26df319b-6382-447b-89c5-9deb1b0a3cd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45752","PortSpecifier":{"PortValue":45752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fabf88b0-e81f-4093-8df5-925836dc73d8","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45752","PortSpecifier":{"PortValue":45752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120374,"nanos":689861088},"http":{"id":"fabf88b0-e81f-4093-8df5-925836dc73d8","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8\"}"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","subscription":"e2e-rate-iso-a-76051f","tenant":"e2e-shared-a-e6c75d","userId":"8fdbbbee-f94d-4726-baff-d51675e030a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-76051f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-76051f"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","selected_subscription":"e2e-rate-iso-a-76051f","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-76051f@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fabf88b0-e81f-4093-8df5-925836dc73d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45768","PortSpecifier":{"PortValue":45768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45768","PortSpecifier":{"PortValue":45768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120375,"nanos":754240482},"http":{"id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8\"}"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","subscription":"e2e-rate-iso-a-76051f","tenant":"e2e-shared-a-e6c75d","userId":"8fdbbbee-f94d-4726-baff-d51675e030a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-76051f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-76051f"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","selected_subscription":"e2e-rate-iso-a-76051f","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-76051f@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a78e8d9-d69b-46ce-bd7d-5b904a1c358b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45776","PortSpecifier":{"PortValue":45776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45776","PortSpecifier":{"PortValue":45776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120376,"nanos":794848301},"http":{"id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11B5I37rNKbl7w6Eb_FzyXfZxPgxRbcqROY55weaVXUCdPPXH4RbbEm0LmFc8\"}"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","subscription":"e2e-rate-iso-a-76051f","tenant":"e2e-shared-a-e6c75d","userId":"8fdbbbee-f94d-4726-baff-d51675e030a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-76051f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-76051f"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8fdbbbee-f94d-4726-baff-d51675e030a8","keyName":"e2e-rate-a-76051f","selected_subscription":"e2e-rate-iso-a-76051f","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-76051f@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-76051f","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d66e98-b7d5-4e6e-8c19-3112f675fc23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35842","PortSpecifier":{"PortValue":35842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35842","PortSpecifier":{"PortValue":35842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120385,"nanos":607613867},"http":{"id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c654be02-57dc-43b8-ae9d-dcf59fcabb88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250b18ca-2706-4385-9764-4f59610561f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38524","PortSpecifier":{"PortValue":38524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"250b18ca-2706-4385-9764-4f59610561f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250b18ca-2706-4385-9764-4f59610561f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38524","PortSpecifier":{"PortValue":38524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120385,"nanos":648846252},"http":{"id":"250b18ca-2706-4385-9764-4f59610561f4","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"250b18ca-2706-4385-9764-4f59610561f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6b417e9-42af-4b64-8bb0-853abd468384","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"]}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"250b18ca-2706-4385-9764-4f59610561f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9829483d06e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e7067fc-e257-4194-b41d-ccba81eb0019"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6b417e9-42af-4b64-8bb0-853abd468384","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250b18ca-2706-4385-9764-4f59610561f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250b18ca-2706-4385-9764-4f59610561f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250b18ca-2706-4385-9764-4f59610561f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83a56509-2377-4cf4-b47b-73f70751818d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35854","PortSpecifier":{"PortValue":35854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83a56509-2377-4cf4-b47b-73f70751818d","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83a56509-2377-4cf4-b47b-73f70751818d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35854","PortSpecifier":{"PortValue":35854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120385,"nanos":687668017},"http":{"id":"83a56509-2377-4cf4-b47b-73f70751818d","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83a56509-2377-4cf4-b47b-73f70751818d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a56509-2377-4cf4-b47b-73f70751818d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83a56509-2377-4cf4-b47b-73f70751818d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83a56509-2377-4cf4-b47b-73f70751818d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35856","PortSpecifier":{"PortValue":35856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35856","PortSpecifier":{"PortValue":35856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120386,"nanos":730040445},"http":{"id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d76c0f6c-7013-4936-8ab2-4f160616f01c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35858","PortSpecifier":{"PortValue":35858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35858","PortSpecifier":{"PortValue":35858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120387,"nanos":771724692},"http":{"id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"382dd725-dc55-40fd-aa8b-87fa737c5b0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120388,"nanos":811626804},"http":{"id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbfeaebd-7ee5-4a56-af04-ed66b0fc97ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35882","PortSpecifier":{"PortValue":35882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35882","PortSpecifier":{"PortValue":35882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120389,"nanos":850349385},"http":{"id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7ff4a09-239b-45d5-999e-dda278a21d1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35884","PortSpecifier":{"PortValue":35884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35884","PortSpecifier":{"PortValue":35884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120390,"nanos":888892770},"http":{"id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24db52cf-e323-4d16-b87c-6d6b2f0940c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120391,"nanos":930306410},"http":{"id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fb0fe3-95d5-4003-b443-304c9739f18f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"912929ec-2ace-4670-b976-816d164265c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42968","PortSpecifier":{"PortValue":42968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"912929ec-2ace-4670-b976-816d164265c0","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"912929ec-2ace-4670-b976-816d164265c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42968","PortSpecifier":{"PortValue":42968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120392,"nanos":967521746},"http":{"id":"912929ec-2ace-4670-b976-816d164265c0","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"912929ec-2ace-4670-b976-816d164265c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"912929ec-2ace-4670-b976-816d164265c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"912929ec-2ace-4670-b976-816d164265c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912929ec-2ace-4670-b976-816d164265c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"912929ec-2ace-4670-b976-816d164265c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"912929ec-2ace-4670-b976-816d164265c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120394,"nanos":5066044},"http":{"id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b643648-a2ed-4cd4-b4e7-0a95d79f1cef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07ff002e-5001-4ea3-8b12-21872595efbc","method":"POST","path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions","host":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120395,"nanos":40905024},"http":{"id":"07ff002e-5001-4ea3-8b12-21872595efbc","method":"POST","headers":{":authority":"e2e-shared-a-e6c75d.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GJE4kYnz1Rg55Efw_2ton34LjtYfcmAwuiOgmgxlSkfWC6zLjGelpcxcxu3d\"}"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","subscription":"e2e-rate-iso-a-eb0cfe","tenant":"e2e-shared-a-e6c75d","userId":"17bd3b68-83da-41fa-8253-4597f1f66f37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e6c75d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e6c75d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17bd3b68-83da-41fa-8253-4597f1f66f37","keyName":"e2e-rate-a-eb0cfe","selected_subscription":"e2e-rate-iso-a-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e6c75d/e2e-rate-iso-a-eb0cfe@ai-tenant-e2e-shared-a-e6c75d/rate-test-model-e6c75d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e6c75d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb0cfe","namespace":"ai-tenant-e2e-shared-a-e6c75d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ff002e-5001-4ea3-8b12-21872595efbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45138","PortSpecifier":{"PortValue":45138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","method":"POST","path":"/ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0/v1/completions","host":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45138","PortSpecifier":{"PortValue":45138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120395,"nanos":74130771},"http":{"id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","method":"POST","headers":{":authority":"e2e-shared-b-dc94b0.apps.8002d0d7-e583-4c9d-9d4d-9829483d06e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fmRR73orIX8lIKCU_Z2b8t29CsxIz6SS1DhJkWQRjgEdT1Soztg3bKF6ebOC"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fmRR73orIX8lIKCU_Z2b8t29CsxIz6SS1DhJkWQRjgEdT1Soztg3bKF6ebOC\"}"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f345c727-fea3-47ed-be7e-60cd26bd4f45","keyName":"e2e-rate-b-eb0cfe","subscription":"e2e-rate-iso-b-eb0cfe","tenant":"e2e-shared-b-dc94b0","userId":"f345c727-fea3-47ed-be7e-60cd26bd4f45","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0\",\"requestedSubscription\":\"e2e-rate-iso-b-eb0cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-dc94b0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-dc94b0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-eb0cfe","namespace":"ai-tenant-e2e-shared-b-dc94b0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-dc94b0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-eb0cfe"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f345c727-fea3-47ed-be7e-60cd26bd4f45","keyName":"e2e-rate-b-eb0cfe","selected_subscription":"e2e-rate-iso-b-eb0cfe","selected_subscription_key":"ai-tenant-e2e-shared-b-dc94b0/e2e-rate-iso-b-eb0cfe@ai-tenant-e2e-shared-b-dc94b0/rate-test-model-dc94b0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-dc94b0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-eb0cfe","namespace":"ai-tenant-e2e-shared-b-dc94b0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T12:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3529d43a-7cde-4461-acc6-28c2c7c94ccd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T13:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91146886078f91d3494675321c2774d01c91e057502033645481239ac22f928c"}
{"level":"info","ts":"2026-07-15T13:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1243957e7492d9a1a2ebc55f33a5309d1fad416b1cccc50526be6257298887ea"}
{"level":"info","ts":"2026-07-15T13:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846003ed510d437248811d7d6f1a180da697e45b5386625d421ef74dd71182c8"}
{"level":"info","ts":"2026-07-15T13:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87a4cc19dc38f527f595a94561ca3e001d2aeec2b856fdb320d6df1a522d6649"}
{"level":"info","ts":"2026-07-15T13:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/445577f6cdd7dbeed1e732f48550a17450dabc315098d8601d193715a566ad2a"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323b5aa67a87f4bbb75410f6526dd6057c69a6ac7ed99a52838319ceb4068fbb"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d47274a7e9b1b67a8cdf9d791496327a8b762a9cb043236c4657056edafe3f6"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dec75bd0f04a15bdec1bda7178fd9fb63eccd60bca311d230fb70a247d752a4"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e163471bf8da6514cb18bdfac38b2443cd2cdc3765f59bda02f692ce394265"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1824b31474c57d2f5471c2906b842bb77f15b6bc7e9abf5eac126e5951a63083"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1885532f3ed5d25bfaf54864572a000d01f375d45e6b7e6500c9bf4595362444"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e92ee5a6e5d3eeba81d8302be74e16ad8f036bd697ad352e71c4f251505d235d"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a786627f824f831e4e02bc938769ff1204a1262dc43fd8d63eaa354708ac0998"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93cecee108aa9d455be5bbfd6c07865ebf9166ae4201d129c40f765cc20e0b82"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24456d9618e457ce0f9626fe83e57af67b6d188eeaa3008c83686b897dc1df69"}
{"level":"info","ts":"2026-07-15T13:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd574919067688fc19901d760b4b08f91784ac89f3799829f106add1318c799c"}
{"level":"info","ts":"2026-07-15T13:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a688bf2da7596f4e880d93ba2528f760b3c466409ca8475f7fd7c63f24acf15"}
{"level":"info","ts":"2026-07-15T13:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee987e0a8978b920fb5a27fc01cc159323adb4448a5ab55a4a16ddc6098b7325"}
{"level":"info","ts":"2026-07-15T13:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a159d6e9798c67416d3ef1a1b3502142468fe362955a485651e060eedd301c3"}
{"level":"info","ts":"2026-07-15T13:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/427cb015092543477d33b6559fe8fb85ed07d96531d83305d6e76ac4e3517d82"}
{"level":"info","ts":"2026-07-15T13:00:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b8613c9f83b096bf4d88fa653bfd17e54723ee89b36b5a8a819d4c187dddeb"}
{"level":"info","ts":"2026-07-15T13:00:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0698854e11bd01e545b4962a207e6611f1d6b74e3c2b9cfb9c21a4904c4ec891"}
{"level":"info","ts":"2026-07-15T13:00:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b666b3ba065e18cab343da954bce6f16fb74f0ffa445b42732219f0cd594ae"}
{"level":"info","ts":"2026-07-15T13:00:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb0af92db3efb412c06471a9905a96dcd6326e81b1cf33f10be76a022b916c71"}