--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rTzyvrYqMwjZI6Cs_1K1wngVACdY0FV4fxpAHL6koErH1qyJWTC44ZdiQYxO"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-72cf7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rTzyvrYqMwjZI6Cs_1K1wngVACdY0FV4fxpAHL6koErH1qyJWTC44ZdiQYxO\"}"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-72cf7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71edd8d4-3a4a-41b3-ba6f-bddb2468dba5","keyName":"e2e-tenant-inference-72cf7b","subscription":"test-model-72cf7b-sub","tenant":"e2e-inf-a-72cf7b","userId":"71edd8d4-3a4a-41b3-ba6f-bddb2468dba5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-72cf7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-72cf7b/test-model-72cf7b\",\"requestedSubscription\":\"test-model-72cf7b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-72cf7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-72cf7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-72cf7b-sub","namespace":"ai-tenant-e2e-inf-a-72cf7b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-72cf7b/test-model-72cf7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-inf-a-72cf7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-72cf7b-sub"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71edd8d4-3a4a-41b3-ba6f-bddb2468dba5","keyName":"e2e-tenant-inference-72cf7b","selected_subscription":"test-model-72cf7b-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-72cf7b/test-model-72cf7b-sub@ai-tenant-e2e-inf-a-72cf7b/test-model-72cf7b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-72cf7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-72cf7b-sub","namespace":"ai-tenant-e2e-inf-a-72cf7b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:08:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0581cfc7-a8dc-4c50-8eb2-ae05070430d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55624","PortSpecifier":{"PortValue":55624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-72cf7b.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55624","PortSpecifier":{"PortValue":55624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311737,"nanos":200581886},"http":{"id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","method":"POST","headers":{":authority":"e2e-inf-a-72cf7b.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a8296371e5c8e61270a071c938c9dba3a271f5cfca77cadf9d1c596845752a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-72cf7b.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-72cf7b/test-model-72cf7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-inf-a-72cf7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9f4175-aa55-4d3a-81b6-66cb0a39dd2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42172","PortSpecifier":{"PortValue":42172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","method":"POST","path":"/ai-tenant-e2e-inf-b-3145cb/test-model-3145cb/v1/chat/completions","host":"e2e-inf-b-3145cb.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42172","PortSpecifier":{"PortValue":42172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311737,"nanos":246461938},"http":{"id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","method":"POST","headers":{":authority":"e2e-inf-b-3145cb.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-3145cb/test-model-3145cb/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J4Ov2mgnp0snccYs_GMEhO4HeyjcUzSFfCan9cYmlfw7lfegBSgCiWKouqOd"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-3145cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J4Ov2mgnp0snccYs_GMEhO4HeyjcUzSFfCan9cYmlfw7lfegBSgCiWKouqOd\"}"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-3145cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-3145cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e028aba2c48bc64d00bb145b50545c76b62d2b24074c1f9a551a7a681d07bde2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-3145cb.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-3145cb/test-model-3145cb/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-17T18:08:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b0ebd15-127f-496f-8ac8-dfa172d74bbc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-17T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7178fd702e786f5e51dd1b3037ce3744bd61e0199376e5fe8859acd8da9ba21c"}
{"level":"info","ts":"2026-07-17T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/528fa3d145e48179ca4dfe005e7b4002d774203459da263807f5fd574e19aa2e"}
{"level":"info","ts":"2026-07-17T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0da24066615a8f25dc65731a6dcd6b0075f20b823e3d7ce5a69f6bac69f59f76"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94dee6d4e572dcc871b7551cdad05dfa986b20e85a3b8d0ab374f0d9f508a122"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d04bdf0ca5480d562ea480ea4b5d07b32db94a6a034ac6a04ccb2c827c6b09b"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94d2213ffa411d0a5a7dfe05dc3405d77ce136566eda853fc1a5a39e506c13e1"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1d64588ddd62f2c70804224851dd0866c54865da120723675efee102f6018fe"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26be7bd4755fcc843427d06f8eac982d9897f742deb5629d7696af5a4e057220"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc823e875e83a91df82e3cae4a84196c224416599fe616f9b0f164dc5de0a1ff"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07689781fb0c2315b4ba39f3a173403c228db1b777422d1bf4dfe10589914885"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e028aba2c48bc64d00bb145b50545c76b62d2b24074c1f9a551a7a681d07bde2"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73d7aacdf370129a10c3a7b07b7c585c1526ff895ff5eaa516597436364a5e84"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05a65a5ae65a6dbbecea48842f5ed3e795d82eb3a16c6143786f8751f58ccb0b"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8dedf69b5b6cf08bd343b22d76184d53fd68cd2d886b9612c304598ad2752ab"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7020c061d2eaa4f37cde72efffb7719e21dada1f123bf3d79447e2e1bfddd815"}
{"level":"info","ts":"2026-07-17T18:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9d7da398fb1ad275d4030a4f3fcddbf41b04c225b37dd2696a54e354e6d2519"}
{"level":"info","ts":"2026-07-17T18:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a8296371e5c8e61270a071c938c9dba3a271f5cfca77cadf9d1c596845752a"}
{"level":"info","ts":"2026-07-17T18:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413b97e0380e774b783e89bf3f7ab776d026d116ac24b513569a6b126e0a5703"}
{"level":"info","ts":"2026-07-17T18:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20a492a906bf5db1d0cab1121c00f19b3f027121c5c24928343644be635a994f"}
{"level":"info","ts":"2026-07-17T18:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce68047173d31bfb697763369df7a84aa7ce19ad2c576ba25699e849cf6f2328"}
{"level":"info","ts":"2026-07-17T18:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5eb2f1087b5cdfe4deffd9a9400a98a6efe89de20e201256f4b3cc8692b32a6"}
{"level":"info","ts":"2026-07-17T18:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3576f98bf22d88dafff00357c2ed0acb345e0e4929e683319d36aabe95ef4c6"}
{"level":"info","ts":"2026-07-17T18:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ad897a388cfbe7c65d02bcef9fd2b65f482a9d91f65e09f81a4a9d6b7ad38aa"}
{"level":"info","ts":"2026-07-17T18:09:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f755dc8c7fb38c1ce01bbc5614f6bf01484c799f75c8fc375893fa45a3ae84ec"}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f"}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f"}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"error","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"info","ts":"2026-07-17T18:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d615d0546c9afa8e4315be17964e9c12b415e44c5cee207682c6c29faeb92885"}
{"level":"info","ts":"2026-07-17T18:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11149f36c5bafd5b2fdf56e16be356b775e0616efa84db28bd54d8db55689803"}
{"level":"info","ts":"2026-07-17T18:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecc800cb77744824b026d34f3dd7f6cd6c3d281241814d708659673596b10754"}
{"level":"info","ts":"2026-07-17T18:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccb308425c2f34a3838eb498a0656de2e114dcc503b1296875ea0118e9d586f"}
{"level":"info","ts":"2026-07-17T18:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867732b940834acdcc2c76ddd013239cd94d9ef8cfec9baf6b07fbdc13cd7e08"}
{"level":"info","ts":"2026-07-17T18:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e3aaf01264a1af3010d5b085ec44bc799543558086644ce9b8638f4038fc26"}
{"level":"info","ts":"2026-07-17T18:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7bdceb40493143627818eb84ed13e349b4c30b273e008ea1bfc05e83563b71"}
{"level":"info","ts":"2026-07-17T18:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f91740e74bfacd8332cc6f4f54b5f5dd343e36eb6abe75a4ac70dba55f74f1df"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"info","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"error","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"error","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"error","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"error","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"info","ts":"2026-07-17T18:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41828","PortSpecifier":{"PortValue":41828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6b69ca-b451-45fa-9882-080e3993575a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41828","PortSpecifier":{"PortValue":41828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311953,"nanos":430625444},"http":{"id":"7c6b69ca-b451-45fa-9882-080e3993575a","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6b69ca-b451-45fa-9882-080e3993575a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8683dad9-d650-4851-89fa-944422c88766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34572","PortSpecifier":{"PortValue":34572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8683dad9-d650-4851-89fa-944422c88766","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8683dad9-d650-4851-89fa-944422c88766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34572","PortSpecifier":{"PortValue":34572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311953,"nanos":491976735},"http":{"id":"8683dad9-d650-4851-89fa-944422c88766","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8683dad9-d650-4851-89fa-944422c88766","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8683dad9-d650-4851-89fa-944422c88766","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8683dad9-d650-4851-89fa-944422c88766","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8683dad9-d650-4851-89fa-944422c88766","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8683dad9-d650-4851-89fa-944422c88766","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41844","PortSpecifier":{"PortValue":41844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","method":"GET","path":"/maas-api/v1/api-keys/b87019a7-0007-4838-ab0f-04ebc8113ec2","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41844","PortSpecifier":{"PortValue":41844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311953,"nanos":550543490},"http":{"id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","method":"GET","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b87019a7-0007-4838-ab0f-04ebc8113ec2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b87019a7-0007-4838-ab0f-04ebc8113ec2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1bf93b-4cd9-4fa9-9c9f-ffb4a26407d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34586","PortSpecifier":{"PortValue":34586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","method":"GET","path":"/maas-api/v1/api-keys/95fe3077-f1ce-4aed-9437-d9401234e4d2","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34586","PortSpecifier":{"PortValue":34586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311953,"nanos":591444511},"http":{"id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","method":"GET","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/95fe3077-f1ce-4aed-9437-d9401234e4d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/95fe3077-f1ce-4aed-9437-d9401234e4d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0702e1c-9f14-4991-b6a2-22aa8e2f42a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36200","PortSpecifier":{"PortValue":36200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36200","PortSpecifier":{"PortValue":36200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311973,"nanos":870093364},"http":{"id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a37d7e64-ad7c-43fb-8b71-a8735d00ccb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43096","PortSpecifier":{"PortValue":43096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0d5ac65-7403-4a8b-a296-838c399d6408","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43096","PortSpecifier":{"PortValue":43096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311973,"nanos":909091971},"http":{"id":"f0d5ac65-7403-4a8b-a296-838c399d6408","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0d5ac65-7403-4a8b-a296-838c399d6408","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36210","PortSpecifier":{"PortValue":36210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36210","PortSpecifier":{"PortValue":36210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311973,"nanos":945906073},"http":{"id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","method":"GET","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CSiw4VQlIHYfqPX2_Ry1Kspl3KUPer3B08BbD62XF6aUiRFwiTeq3jkiwqZ5"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CSiw4VQlIHYfqPX2_Ry1Kspl3KUPer3B08BbD62XF6aUiRFwiTeq3jkiwqZ5\"}"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7e1c8ccd-cfe2-4469-bf9e-5d704c3882d0","keyName":"e2e-auth-iso-a-3317d5","subscription":"e2e-auth-iso-457de8","tenant":"e2e-shared-a-0a98d9","userId":"7e1c8ccd-cfe2-4469-bf9e-5d704c3882d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-457de8"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f4573b9-e49b-4cde-a75f-074dc0f29b0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52608","PortSpecifier":{"PortValue":52608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52608","PortSpecifier":{"PortValue":52608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311993,"nanos":373045713},"http":{"id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6757ffe5-1810-4d9c-b210-e9f27fd3533e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39406","PortSpecifier":{"PortValue":39406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39406","PortSpecifier":{"PortValue":39406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311993,"nanos":411255861},"http":{"id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bcbd3a2-bf91-46fc-a61a-127c26e9e5be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39408","PortSpecifier":{"PortValue":39408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39408","PortSpecifier":{"PortValue":39408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784311993,"nanos":456600509},"http":{"id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","method":"GET","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11rPsiCVbewSupzjd_USGHGnOByh2fjhkEjFHHCZq0hlNrN0iCT2ZudDgaxvx"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11rPsiCVbewSupzjd_USGHGnOByh2fjhkEjFHHCZq0hlNrN0iCT2ZudDgaxvx\"}"}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-17T18:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d43bba5-1adc-48d1-8bbe-086e1565bfa1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312010,"nanos":930100421},"http":{"id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c52de7a7-db0f-4c29-9529-9fd7e9ab63de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36230","PortSpecifier":{"PortValue":36230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36230","PortSpecifier":{"PortValue":36230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312010,"nanos":965479047},"http":{"id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ebb340c-fbe6-44d8-a5c3-c96a0624baad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312011,"nanos":4105874},"http":{"id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fb13c3c-3ad4-4594-a29a-8cc14f512ea7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312011,"nanos":45480526},"http":{"id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c8265f-e7b7-4912-8fdc-b9c675856799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33438","PortSpecifier":{"PortValue":33438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33438","PortSpecifier":{"PortValue":33438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312030,"nanos":523010659},"http":{"id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef5093cf-fa04-4dc1-a4c9-d5ab0fb4bd2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46936","PortSpecifier":{"PortValue":46936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"126874e7-6beb-433a-ab16-f8fcaadc2831","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46936","PortSpecifier":{"PortValue":46936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312030,"nanos":569253608},"http":{"id":"126874e7-6beb-433a-ab16-f8fcaadc2831","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126874e7-6beb-433a-ab16-f8fcaadc2831","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46952","PortSpecifier":{"PortValue":46952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","method":"GET","path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46952","PortSpecifier":{"PortValue":46952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312030,"nanos":609006472},"http":{"id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","method":"GET","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45762106-dec0-45f4-852f-7d9aeb82ae6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33442","PortSpecifier":{"PortValue":33442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","method":"GET","path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33442","PortSpecifier":{"PortValue":33442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312030,"nanos":644386834},"http":{"id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","method":"GET","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0355929-fa53-460c-b4b8-31aad6cb8d5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb5ee0e9-4a48-4644-82f5-a29db5ef73ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49258","PortSpecifier":{"PortValue":49258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49258","PortSpecifier":{"PortValue":49258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312057,"nanos":360110137},"http":{"id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f19db83-db8f-42d2-a625-59cec3ead9c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55504","PortSpecifier":{"PortValue":55504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55504","PortSpecifier":{"PortValue":55504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312057,"nanos":398888054},"http":{"id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/auth-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccabb0c-6c45-9a80-84f5-1863beb69cc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49266","PortSpecifier":{"PortValue":49266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78b9f832-2044-4938-9c20-9b2cfc602f29","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49266","PortSpecifier":{"PortValue":49266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312057,"nanos":442291193},"http":{"id":"78b9f832-2044-4938-9c20-9b2cfc602f29","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Rs7qu3Fu6F9UsjkS_G2NvTfNOiabj5Z4HlGnuhnipXZuQftjKCcOmnZiNxIJ"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Rs7qu3Fu6F9UsjkS_G2NvTfNOiabj5Z4HlGnuhnipXZuQftjKCcOmnZiNxIJ\"}"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0dacc463-8b92-4747-9ae5-50437b29d285","keyName":"e2e-auth-iso-a-48b58a","subscription":"e2e-auth-iso-f05c92","tenant":"e2e-shared-a-0a98d9","userId":"0dacc463-8b92-4747-9ae5-50437b29d285","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/auth-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f05c92"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b9f832-2044-4938-9c20-9b2cfc602f29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0431cf3e9713f8930c2cdc6866509a39103ec5dfefecc5ee60aeeb1e7be89d8"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/835a3f78df52134d377bde27a73c3af847b5a69af5a29416030abc14e00a31af"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/435b85fe92265057d3ed461fb94a390a418352371a893f4c28108955ca0fcf3c"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bdc9e03a731cdc8c1408be5c3b4f32f6e0939416f7a39ba16207fbb65589f68"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd246df78da421ca496688f7d68eb3f2ec9d2f660c5551bcd2cbd8b90b6d7b21"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6622d9d730611b77ab87d03598705d14a16b1f1e9b03547fcab5cfc4769b5e"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/597924ea5826bbcbf9c84eba5465bd9503322910d1ebd58d91ca4bfb0fd77e03"}
{"level":"info","ts":"2026-07-17T18:14:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d0097f64450735c561a0f3cfe655169a8155b8dcf212b8f003fd453dfe8649c"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"error","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"debug","ts":"2026-07-17T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/749809b89f7001526f3a9e1f5f22718bb7173fc42d54e0f759a6b80723ebb06c"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc76c5135bdb61f3cc99b85f35b1c3b39fe4f15eea38a61c5e9686cb1f71801"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/156a1aac6301bc468a2066df1ed132a62b9a64eac9909fa2a1790685626585c7"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/430c7ea55d4355a319c3e5bbc5148a1b26a0b9210223b8b8ee34adbd10a07133"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42293e14500f45a38937d33c2ffe1c90f61bec7190cc6b3890b4fac5ad38d857"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b81a996d7dd55b2faa2d3095f9f1fd7c4c8c97b61d6df93379bfd768ca9a56f0"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/516c06e6e3dd935a129d2d40ac8715df9c01ca0bc76b9d61e18be93adbad75fc"}
{"level":"info","ts":"2026-07-17T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/635eb247e9d92267b502f993009bce017d8aaa7743fab3f6cebeb52f7549627f"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"}
{"level":"debug","ts":"2026-07-17T18:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02"}
{"level":"info","ts":"2026-07-17T18:15:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"info","ts":"2026-07-17T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"debug","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"}
{"level":"debug","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"}
{"level":"info","ts":"2026-07-17T18:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35252","PortSpecifier":{"PortValue":35252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35252","PortSpecifier":{"PortValue":35252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312116,"nanos":205287671},"http":{"id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/sub-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae0e86d-dcf5-4809-8606-eaad2d17918d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39000","PortSpecifier":{"PortValue":39000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39000","PortSpecifier":{"PortValue":39000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312116,"nanos":248393207},"http":{"id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/sub-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12f3f510-f60f-4d1b-9762-3af55043c4e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35254","PortSpecifier":{"PortValue":35254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e42f384-e5f3-4493-bc21-ff348370b52d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35254","PortSpecifier":{"PortValue":35254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312116,"nanos":286697067},"http":{"id":"1e42f384-e5f3-4493-bc21-ff348370b52d","method":"GET","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d4COFIgmY8nElc6t_eVvcr1jwbLazStkEgNdeO7BvQMu97EDcScDi8sDfikE"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d4COFIgmY8nElc6t_eVvcr1jwbLazStkEgNdeO7BvQMu97EDcScDi8sDfikE\"}"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2c5e7a4-3f9d-4b51-a2af-bbe8d80f1e3b","keyName":"e2e-sub-iso-908eb1","subscription":"e2e-a-only-d78493","tenant":"e2e-shared-a-0a98d9","userId":"a2c5e7a4-3f9d-4b51-a2af-bbe8d80f1e3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/sub-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d78493"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e42f384-e5f3-4493-bc21-ff348370b52d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312116,"nanos":319760522},"http":{"id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","method":"GET","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l0Y4z4ZErMJVjnxK_okHSNNyOSLXvoeX3hDj4TIw05f9hBNH14RNUdu4udA6"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l0Y4z4ZErMJVjnxK_okHSNNyOSLXvoeX3hDj4TIw05f9hBNH14RNUdu4udA6\"}"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09a4a281-c992-45c3-ac02-785bb09d07cb","keyName":"e2e-sub-iso-cbbed0","subscription":"e2e-b-only-d78493","tenant":"e2e-shared-b-37d0b7","userId":"09a4a281-c992-45c3-ac02-785bb09d07cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/sub-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d78493"}
{"level":"info","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d109a77-5eb5-42e8-8b5f-c0c7305fd7ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75631bda-5338-46ae-947c-549967a4a162","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53730","PortSpecifier":{"PortValue":53730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75631bda-5338-46ae-947c-549967a4a162","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75631bda-5338-46ae-947c-549967a4a162","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53730","PortSpecifier":{"PortValue":53730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312128,"nanos":717102521},"http":{"id":"75631bda-5338-46ae-947c-549967a4a162","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75631bda-5338-46ae-947c-549967a4a162","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75631bda-5338-46ae-947c-549967a4a162","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/sub-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75631bda-5338-46ae-947c-549967a4a162","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75631bda-5338-46ae-947c-549967a4a162","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75631bda-5338-46ae-947c-549967a4a162","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312128,"nanos":756793923},"http":{"id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/sub-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fb78257-d8df-4af7-8e64-21b1d942b5a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53742","PortSpecifier":{"PortValue":53742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53742","PortSpecifier":{"PortValue":53742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312128,"nanos":795219358},"http":{"id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wvQeRUST7a4Ng0kN_MSPzg5bBpT5ViB9cdYaLmsGXaFXRnivflHJ0m8Cc8ZM"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wvQeRUST7a4Ng0kN_MSPzg5bBpT5ViB9cdYaLmsGXaFXRnivflHJ0m8Cc8ZM\"}"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28cb8234-eca0-48ea-bc32-e2a5f869ff6c","keyName":"e2e-sub-iso-965535","subscription":"e2e-shared-sub-19aad6","tenant":"e2e-shared-a-0a98d9","userId":"28cb8234-eca0-48ea-bc32-e2a5f869ff6c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/sub-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-19aad6"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b1f2932-a3b0-4f35-b156-32b60405a28b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312128,"nanos":827986358},"http":{"id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VqY0S7dC2yvZnzbb_kftACGV0o0dLLHZFoX9Wmm5ZXxV6OhKE0gpJBqJEY6V"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VqY0S7dC2yvZnzbb_kftACGV0o0dLLHZFoX9Wmm5ZXxV6OhKE0gpJBqJEY6V\"}"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72dda8f0-5eb4-4fec-a450-3f959069ddf2","keyName":"e2e-sub-iso-48a972","subscription":"e2e-shared-sub-19aad6","tenant":"e2e-shared-b-37d0b7","userId":"72dda8f0-5eb4-4fec-a450-3f959069ddf2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/sub-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-19aad6"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"348d0a2c-fa4a-4e79-bd93-62f53064b24c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d168bfa666be7744563d36d74c78f800cf8e015958ea98472048bcf8e4cc989"}
{"level":"info","ts":"2026-07-17T18:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caf9e84f5b30e8c1c1ac62c310a994e2e2b461af162b37b05d41d56cd66e0f02"}
{"level":"info","ts":"2026-07-17T18:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e5ffdc3ea8b9e816e42f117466010e5f81498015d7a6b7c094f63f28b3300c8"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686dd7c2da3529b5648c7e02a1d799305f92954ca489a788ae100494f1724279"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2336e1ee6bd7b47ee86a287f1718cbd250b9cf01407c09488bfd6a626a36c57"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e39af34cbfe06e63657146f35b19012b77d2353550b0e59c1ec34d4fc51843ff"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e41a4dee8ed9f70631d130d190bfdc469a2203ea8c6f1410faa1112f1c9715a"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e775ec53540ffded14a0bc09d4b43bf80b4f81380f0eff82e62855c226d65"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa80fbe5b3d25795c5c9a6544ee13e960f2e3af61a81540ea0330613c1219702"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a65b8d73e0791b55288cc2f4057bd62c141dc7b448e6e22270ef42fe6a02e7c6"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4050101df7285cf3b25da50ac9ef646471e77d628e95b54740ee8ad96b3549ec"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bddee4be44f47625a5ad3780781d0ac22d31a7df72ef4e6f24d9b642fb27d2e1"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64a153d59716acdb131389f35bda332ea9fabb9497c44311ee56a9f5da0c9193"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a955f340d2d65d42ee325a1fb95bd318888f8301abb8f2568cd26c66f7642b23"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/611e2412ce3afaa167a3a425322e123d29590552c47977acebf7e6b37b913c47"}
{"level":"info","ts":"2026-07-17T18:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4e43439b2214fb67ee0827c0525004954604997e035eb8745a7f4749d721eaa"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:15:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:15:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484"}
{"level":"debug","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"error","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"}
{"level":"info","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"debug","ts":"2026-07-17T18:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e66cb4a816dd707258258f2a23f2d33d05702108241edcd030fd822e2dbc182d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be0b1c0112937568e5f186e70c0c37be0b467b086b1a09a83c71c6d999c3b5c"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"info","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"debug","ts":"2026-07-17T18:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484"}
{"level":"debug","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cd3c11a150005cfe37438471c0ed2da157ef15139932edf2998f2d0dbf763cd"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54454","PortSpecifier":{"PortValue":54454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54454","PortSpecifier":{"PortValue":54454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312202,"nanos":29047228},"http":{"id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26e6cf46-1ae9-4b6d-abd2-4ead8e2a7414","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7669a925-d20b-45c6-816d-5ecd9e603899","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312202,"nanos":74772096},"http":{"id":"7669a925-d20b-45c6-816d-5ecd9e603899","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7669a925-d20b-45c6-816d-5ecd9e603899","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54460","PortSpecifier":{"PortValue":54460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e47c1837-d742-4ae3-a450-8cc759087aeb","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54460","PortSpecifier":{"PortValue":54460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312202,"nanos":117545240},"http":{"id":"e47c1837-d742-4ae3-a450-8cc759087aeb","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS\"}"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","subscription":"e2e-rate-iso-a-daaf96","tenant":"e2e-shared-a-0a98d9","userId":"20149544-a06e-48f9-a79d-85c9ecbfe168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-daaf96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-daaf96"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","selected_subscription":"e2e-rate-iso-a-daaf96","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-daaf96@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e47c1837-d742-4ae3-a450-8cc759087aeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312203,"nanos":181189670},"http":{"id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS\"}"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","subscription":"e2e-rate-iso-a-daaf96","tenant":"e2e-shared-a-0a98d9","userId":"20149544-a06e-48f9-a79d-85c9ecbfe168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-daaf96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-daaf96"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","selected_subscription":"e2e-rate-iso-a-daaf96","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-daaf96@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e782bf2-59d3-4a0c-aad8-ae53306f06f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54472","PortSpecifier":{"PortValue":54472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce89b12-ed7e-448e-a97c-1a9951188321","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54472","PortSpecifier":{"PortValue":54472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312204,"nanos":218876745},"http":{"id":"fce89b12-ed7e-448e-a97c-1a9951188321","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14seJjPK7aD6ZTbU4_gySGAunPWHpCm1gJ0qZpdPrPxHnxXMYHzauQqhNUkPS\"}"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","subscription":"e2e-rate-iso-a-daaf96","tenant":"e2e-shared-a-0a98d9","userId":"20149544-a06e-48f9-a79d-85c9ecbfe168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-daaf96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-daaf96"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20149544-a06e-48f9-a79d-85c9ecbfe168","keyName":"e2e-rate-a-daaf96","selected_subscription":"e2e-rate-iso-a-daaf96","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-daaf96@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-daaf96","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce89b12-ed7e-448e-a97c-1a9951188321","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46830","PortSpecifier":{"PortValue":46830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46830","PortSpecifier":{"PortValue":46830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312217,"nanos":308763956},"http":{"id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"600ad4f7-5c55-450a-aedf-9e3b09b1f90f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683f1415-4293-4649-9a63-710fee0af8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35634","PortSpecifier":{"PortValue":35634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"683f1415-4293-4649-9a63-710fee0af8e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683f1415-4293-4649-9a63-710fee0af8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35634","PortSpecifier":{"PortValue":35634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312217,"nanos":348307384},"http":{"id":"683f1415-4293-4649-9a63-710fee0af8e5","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"683f1415-4293-4649-9a63-710fee0af8e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"]}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"683f1415-4293-4649-9a63-710fee0af8e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d2bee3c0280f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d5861a1c-e750-4bb8-b45e-46576507fdb7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"47710363-bc1c-422b-a3f7-6dd40ac0533f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84e0c857c7cacdc5a40ceca28216e916ea16817070a3df8e39802c00276bd894"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683f1415-4293-4649-9a63-710fee0af8e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683f1415-4293-4649-9a63-710fee0af8e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683f1415-4293-4649-9a63-710fee0af8e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46836","PortSpecifier":{"PortValue":46836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46836","PortSpecifier":{"PortValue":46836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312217,"nanos":386135019},"http":{"id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25\"}"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","subscription":"e2e-rate-iso-a-4fb2bf","tenant":"e2e-shared-a-0a98d9","userId":"d9365434-1fce-4d44-956e-828cd2186b00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-4fb2bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fb2bf"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","selected_subscription":"e2e-rate-iso-a-4fb2bf","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-4fb2bf@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18b5e0bb-677c-4e12-a745-0c7a92fa006e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3339f51-1458-4734-980e-8da38c54c206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46840","PortSpecifier":{"PortValue":46840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3339f51-1458-4734-980e-8da38c54c206","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3339f51-1458-4734-980e-8da38c54c206","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46840","PortSpecifier":{"PortValue":46840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312218,"nanos":437232734},"http":{"id":"b3339f51-1458-4734-980e-8da38c54c206","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25\"}"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","subscription":"e2e-rate-iso-a-4fb2bf","tenant":"e2e-shared-a-0a98d9","userId":"d9365434-1fce-4d44-956e-828cd2186b00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-4fb2bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3339f51-1458-4734-980e-8da38c54c206","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fb2bf"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3339f51-1458-4734-980e-8da38c54c206","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","selected_subscription":"e2e-rate-iso-a-4fb2bf","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-4fb2bf@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3339f51-1458-4734-980e-8da38c54c206","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3339f51-1458-4734-980e-8da38c54c206","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46856","PortSpecifier":{"PortValue":46856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","method":"POST","path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions","host":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46856","PortSpecifier":{"PortValue":46856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312219,"nanos":489094946},"http":{"id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","method":"POST","headers":{":authority":"e2e-shared-a-0a98d9.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18G4rPq3Am1M3PYOj_kTgSWwtwkpllwE5jrUIB6G3BZ9GTelYNbPoBaFYGB25\"}"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","subscription":"e2e-rate-iso-a-4fb2bf","tenant":"e2e-shared-a-0a98d9","userId":"d9365434-1fce-4d44-956e-828cd2186b00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\",\"requestedSubscription\":\"e2e-rate-iso-a-4fb2bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0a98d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0a98d9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fb2bf"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d9365434-1fce-4d44-956e-828cd2186b00","keyName":"e2e-rate-a-4fb2bf","selected_subscription":"e2e-rate-iso-a-4fb2bf","selected_subscription_key":"ai-tenant-e2e-shared-a-0a98d9/e2e-rate-iso-a-4fb2bf@ai-tenant-e2e-shared-a-0a98d9/rate-test-model-0a98d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a98d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fb2bf","namespace":"ai-tenant-e2e-shared-a-0a98d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd958c98-4cc9-495a-a6b0-8dd1fdbff98a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35642","PortSpecifier":{"PortValue":35642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d01dd72-fac7-48f1-9640-96170e055b1f","method":"POST","path":"/ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7/v1/completions","host":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35642","PortSpecifier":{"PortValue":35642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784312219,"nanos":558732745},"http":{"id":"1d01dd72-fac7-48f1-9640-96170e055b1f","method":"POST","headers":{":authority":"e2e-shared-b-37d0b7.apps.52f16470-6449-469e-afae-d2bee3c0280f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-upaEC5kBzYO15Ic7_GZ6mIuxcc57I02EyoD44sd4q0PlXYgGoDtj4LXKJ8T6"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-upaEC5kBzYO15Ic7_GZ6mIuxcc57I02EyoD44sd4q0PlXYgGoDtj4LXKJ8T6\"}"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ff17aeb-7a1c-4617-8c29-723bca6acd0a","keyName":"e2e-rate-b-4fb2bf","subscription":"e2e-rate-iso-b-4fb2bf","tenant":"e2e-shared-b-37d0b7","userId":"4ff17aeb-7a1c-4617-8c29-723bca6acd0a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7\",\"requestedSubscription\":\"e2e-rate-iso-b-4fb2bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-37d0b7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37d0b7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4fb2bf","namespace":"ai-tenant-e2e-shared-b-37d0b7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-37d0b7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4fb2bf"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ff17aeb-7a1c-4617-8c29-723bca6acd0a","keyName":"e2e-rate-b-4fb2bf","selected_subscription":"e2e-rate-iso-b-4fb2bf","selected_subscription_key":"ai-tenant-e2e-shared-b-37d0b7/e2e-rate-iso-b-4fb2bf@ai-tenant-e2e-shared-b-37d0b7/rate-test-model-37d0b7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37d0b7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4fb2bf","namespace":"ai-tenant-e2e-shared-b-37d0b7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d01dd72-fac7-48f1-9640-96170e055b1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677a600e4dcf2500237ccbf798a9873cf9fcc120f2ee1b5c48b3215b026a9143"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27487426838d1f2f55dbd033479e41e60217eb5fffa54a9cee8747d433b70317"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b565b6a78c7dbe39a8278613c74671e9fc923845cb954357babfab2253577484"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe838ce9ac08a24c1097139e82599c34895a56442a82e1d40b4928ee126e9c5"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dab7b50a12ec4fd2b4e4199aa08ca5999582b9564b53795d30178c1649e6e1e0"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14dcdb016a0a0aa1bdc0c7dea72c184b201f5ce5f992881065061cf0ac68da42"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c49d66de0e6421dd89478f3a5cecc70b62aeb64f6cff2486f1643314f055b36"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b6190342ce6168ab520e61f97813934d438ab5f1d9c2efc1d31a781e612847f"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6200fd0c6e33ba15ce9ac9fcadaefd744c74c8ecf38d0e09db2f6acbfaef396d"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b4d0598c3e115fcff113fbbabd6abfe4423c23d72e642c258851de9e8a3c13"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b45be370f52daa22333741516819f513f21984d6543ad8039b3972b988ab14e"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f021e1f94c90b3cca50f660611d4fd8f97060b58b9d27113f1d2d6ab1dcb2e9f"}
{"level":"info","ts":"2026-07-17T18:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d981695a4b31d95979f25d02a4b184feea988e5563a4421c31e1eb84bb9f535"}
{"level":"info","ts":"2026-07-17T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c99ce57ec5900e0dbea68392135c3d541259b302fe4a578cedecae8425d50676"}
{"level":"info","ts":"2026-07-17T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e162fb37ebfe97bd6259cb019e7f4ed7251e0f884facf78dd975188d0c823423"}
{"level":"info","ts":"2026-07-17T18:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde8497b8f2d18a1dd3d8c8d4d085911e4cb9871edf9e03cbc2f211604450167"}
{"level":"info","ts":"2026-07-17T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e9ac2609f77e0b9a86da082b812f09b999c48a30104d80769548dd04635ae7"}
{"level":"info","ts":"2026-07-17T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f35f133bc84d96fa7ef9eb6214427e7f3f77c1fb6a22eb235bef3268f6000662"}
{"level":"info","ts":"2026-07-17T18:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94c2650f079b91023f04f4a31c92fc35224dc3a6ed5ea93fd249aebbc1d07041"}
{"level":"info","ts":"2026-07-17T18:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/103ac4fe4d894cd82ab81311ec483ce1c51a51b766833388640cc9228dc96a60"}