{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"error","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:11:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"debug","ts":"2026-07-07T07:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"error","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:11:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:11:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":509992923},"http":{"id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebb55f26-f63e-47f3-90e2-f7a541bfe4a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"873a7342-0326-46a3-bad4-744f9d7f852c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":551239768},"http":{"id":"873a7342-0326-46a3-bad4-744f9d7f852c","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873a7342-0326-46a3-bad4-744f9d7f852c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38024","PortSpecifier":{"PortValue":38024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408301,"nanos":596205946},"http":{"id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637d0dc-d3af-4997-bd94-49c41bd0e897","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38030","PortSpecifier":{"PortValue":38030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408302,"nanos":658636178},"http":{"id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9ca9-a9dd-45d4-b20f-343885a62ada","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408303,"nanos":694785293},"http":{"id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1mpeCn68ziHvLHvQ_iDlqYMMCrbsajsI2NkCphc9cfrYSlWaNn1Xyakiw9fF\"}"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","subscription":"e2e-rate-iso-a-cde102","tenant":"e2e-shared-a-94448f","userId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-cde102\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cde102"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed20746-0e6b-4a36-b475-5d4d85666bf4","keyName":"e2e-rate-a-cde102","selected_subscription":"e2e-rate-iso-a-cde102","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-cde102@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cde102","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58902138-9e05-41bf-9d06-7c9d32e3ff6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54686","PortSpecifier":{"PortValue":54686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54686","PortSpecifier":{"PortValue":54686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":460605074},"http":{"id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b69c628-b629-4dfb-a420-0ec008ae36cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd5694f9-622e-49fd-b31f-48085a0e2470","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":500783737},"http":{"id":"bd5694f9-622e-49fd-b31f-48085a0e2470","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"]}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6142320f283e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eff3764a-eb9c-4e86-ae86-10e14b78ff5f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7328014b-1d0b-4ce3-a8d7-987bc6d4a5fd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5694f9-622e-49fd-b31f-48085a0e2470","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54698","PortSpecifier":{"PortValue":54698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54698","PortSpecifier":{"PortValue":54698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408314,"nanos":539265573},"http":{"id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a8adfe8-56b3-419c-af89-2cd8946d7d90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408315,"nanos":575689636},"http":{"id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eab30b1-b475-486d-b9b2-87a8455c0dfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5744141-ea33-4df1-9398-d38b72602903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60350","PortSpecifier":{"PortValue":60350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5744141-ea33-4df1-9398-d38b72602903","method":"POST","path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions","host":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5744141-ea33-4df1-9398-d38b72602903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60350","PortSpecifier":{"PortValue":60350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408316,"nanos":615217048},"http":{"id":"e5744141-ea33-4df1-9398-d38b72602903","method":"POST","headers":{":authority":"e2e-shared-a-94448f.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TiGik3TGBAzLeuYv_YnbpdxG0elro3jZyjT9nSVcLZWkZGenfmL9Rjuic6M8\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","subscription":"e2e-rate-iso-a-311c1a","tenant":"e2e-shared-a-94448f","userId":"43c30739-aeeb-4890-94bd-c93084047e5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\",\"requestedSubscription\":\"e2e-rate-iso-a-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-94448f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5744141-ea33-4df1-9398-d38b72602903","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5744141-ea33-4df1-9398-d38b72602903","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c30739-aeeb-4890-94bd-c93084047e5a","keyName":"e2e-rate-a-311c1a","selected_subscription":"e2e-rate-iso-a-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-a-94448f/e2e-rate-iso-a-311c1a@ai-tenant-e2e-shared-a-94448f/rate-test-model-94448f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-94448f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-311c1a","namespace":"ai-tenant-e2e-shared-a-94448f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5744141-ea33-4df1-9398-d38b72602903","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5744141-ea33-4df1-9398-d38b72602903","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","method":"POST","path":"/ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a/v1/completions","host":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783408316,"nanos":652229812},"http":{"id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","method":"POST","headers":{":authority":"e2e-shared-b-c72c9a.apps.78d6c660-51ef-4f40-843b-6142320f283e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PmwD7ryd7uNh79Vw_1rxd1pGblxyUMblHSxCuIZ6cqofxUWyphYnjkrLHJ2T"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PmwD7ryd7uNh79Vw_1rxd1pGblxyUMblHSxCuIZ6cqofxUWyphYnjkrLHJ2T\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","keyName":"e2e-rate-b-311c1a","subscription":"e2e-rate-iso-b-311c1a","tenant":"e2e-shared-b-c72c9a","userId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\",\"requestedSubscription\":\"e2e-rate-iso-b-311c1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c72c9a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c72c9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-311c1a","namespace":"ai-tenant-e2e-shared-b-c72c9a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-311c1a"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11de6ec4-e1cd-40c0-8974-60ad559881c2","keyName":"e2e-rate-b-311c1a","selected_subscription":"e2e-rate-iso-b-311c1a","selected_subscription_key":"ai-tenant-e2e-shared-b-c72c9a/e2e-rate-iso-b-311c1a@ai-tenant-e2e-shared-b-c72c9a/rate-test-model-c72c9a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c72c9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-311c1a","namespace":"ai-tenant-e2e-shared-b-c72c9a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6568ace4-361d-4374-9fa6-e0d8cdd7ca83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db44f53a13244ae1fedb818275684d231c783871d4f3fc2b5f2615a830243b66"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4fe208471734eeb6f4bc4e07494f2c333d0fb19b070cbfcca0c792bd95a4786"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4b18d923e104e79b1f2d1b373ce57028b11e7f3ab4477fbd65af02e233e9840"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b42fef16fd3d4779a4299b16b0c6c7d7f6713dcafd2b66d936b6579639cd617"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2ee2a5f26d705267df8e5a1bd8a2b2ab5382f706d338782cacd034258a5c591"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeb56e6c34ac805552c2d00f47287e5774d1b836215e1c2d632c69a35c6c5af4"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1577cda89893d25766e796c7fcfb97b0c1f05d7a847025aa3db6598423406956"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f5961450bdffb7675db51ad3a10b48dba8e9068abb751d9904cf4fa07c00668"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a7e95edc2811050cd82ef591ec9e955bc89707064d2196b562849529905ba6c"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa6289456574322eb1e9a29108e2f56801bd0b8d358a8e89b0c6317b3721897"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/841a21565a3cf17dd299ef893e6d35122b727f7763535363c89c73c23e271e31"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8808aab1ff977cbc917ad2bc9ea09eb1246215c6304a3dcb35a534b5d8892da5"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab313c5aca1b69bb63135d0f5f6ec5181af4f4304108f8706fe8826ae3e90f0f"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ccbb46d719d8990889ef2a4dd977d86d8a70a78f7468696a620aa3375b3bc54"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5722329332757f82b36ee1353bc3ec6e60116fd0b535b9a6a4b33c4d77ea0993"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1e21456aebbc2aabf20596fd0605e115fa83eb799988feaefe46351fac19361"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f166bbd3ab882820f753cf784313525e5f053bbbe34354815c163723d29c3ffe"}
{"level":"info","ts":"2026-07-07T07:12:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50107c9ce3f1d68e69a463abc404a2be0cfaecf1e07aa5d7705f7449f1eece88"}
{"level":"info","ts":"2026-07-07T07:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e920364fc486257f262378f4142b44655305b206dcd7efd1390889507f64a6d"}
{"level":"info","ts":"2026-07-07T07:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c2bfc5a3d71d5ceb4d5bd965bfba865f2c890dbccfc0f86b11d21af8855a38"}