--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763"}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"info","ts":"2026-07-16T16:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b063894-e831-4f83-a350-9a6f9689c8e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218227,"nanos":330047967},"http":{"id":"1b063894-e831-4f83-a350-9a6f9689c8e3","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b063894-e831-4f83-a350-9a6f9689c8e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32962","PortSpecifier":{"PortValue":32962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32962","PortSpecifier":{"PortValue":32962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218227,"nanos":394709864},"http":{"id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50de1510-fe9e-45fd-b691-ec3615f7d47a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47014","PortSpecifier":{"PortValue":47014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","method":"GET","path":"/maas-api/v1/api-keys/e2c61142-9e82-4dd4-80c1-893f129d0e14","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47014","PortSpecifier":{"PortValue":47014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218227,"nanos":483692671},"http":{"id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","method":"GET","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2c61142-9e82-4dd4-80c1-893f129d0e14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2c61142-9e82-4dd4-80c1-893f129d0e14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0499949d-b2ed-4b56-830b-8f0ebbbf22f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32976","PortSpecifier":{"PortValue":32976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a141654-8519-4065-a28e-cbcfb55f4e53","method":"GET","path":"/maas-api/v1/api-keys/12494366-088e-42b1-9558-99b97c7814e9","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32976","PortSpecifier":{"PortValue":32976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218227,"nanos":522046914},"http":{"id":"4a141654-8519-4065-a28e-cbcfb55f4e53","method":"GET","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12494366-088e-42b1-9558-99b97c7814e9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12494366-088e-42b1-9558-99b97c7814e9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a141654-8519-4065-a28e-cbcfb55f4e53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59676","PortSpecifier":{"PortValue":59676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59676","PortSpecifier":{"PortValue":59676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218247,"nanos":109845523},"http":{"id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0801b341-d8ce-4d51-a5b0-1bc77da5e0fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51986","PortSpecifier":{"PortValue":51986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51986","PortSpecifier":{"PortValue":51986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218247,"nanos":153127271},"http":{"id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c0875f-b764-45fd-b7ff-74eb63c0ba75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e59c5579-8520-410c-87f8-2557709dc953","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59678","PortSpecifier":{"PortValue":59678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e59c5579-8520-410c-87f8-2557709dc953","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e59c5579-8520-410c-87f8-2557709dc953","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59678","PortSpecifier":{"PortValue":59678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218247,"nanos":204773595},"http":{"id":"e59c5579-8520-410c-87f8-2557709dc953","method":"GET","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UDf9Lzi90qmbkE20_4MIbOggzrpxGCPwDKNch45m8JTFUSxl1yjYGH7Pvj5A"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UDf9Lzi90qmbkE20_4MIbOggzrpxGCPwDKNch45m8JTFUSxl1yjYGH7Pvj5A\"}"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e55b7271-83dd-4ab6-928a-9e5c53a11b8a","keyName":"e2e-auth-iso-a-a5fe56","subscription":"e2e-auth-iso-ac59da","tenant":"e2e-shared-a-83e7d4","userId":"e55b7271-83dd-4ab6-928a-9e5c53a11b8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e59c5579-8520-410c-87f8-2557709dc953","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ac59da"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e59c5579-8520-410c-87f8-2557709dc953","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e59c5579-8520-410c-87f8-2557709dc953","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e59c5579-8520-410c-87f8-2557709dc953","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b01d9c49-fe49-4129-a463-655f4aae2029","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218264,"nanos":740044988},"http":{"id":"b01d9c49-fe49-4129-a463-655f4aae2029","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b01d9c49-fe49-4129-a463-655f4aae2029","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53222","PortSpecifier":{"PortValue":53222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53222","PortSpecifier":{"PortValue":53222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218264,"nanos":778852852},"http":{"id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84c92e57-dadf-4a5a-a2b7-9301010e5012","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218264,"nanos":817228574},"http":{"id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","method":"GET","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ukvEcwUEPnnAeuep_eMd3QRXyX782VtYQ008QUPd2GTK02XgYXv83hP7IS1a"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ukvEcwUEPnnAeuep_eMd3QRXyX782VtYQ008QUPd2GTK02XgYXv83hP7IS1a\"}"}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T16:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc12e15-6c4c-40b0-9a06-6615b2da433b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48270","PortSpecifier":{"PortValue":48270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48270","PortSpecifier":{"PortValue":48270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218282,"nanos":150659288},"http":{"id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a8278c-82d3-44f5-92a8-5a6806bf34fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45758","PortSpecifier":{"PortValue":45758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e7c9de4-ba6f-463d-b4be-671370e59799","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45758","PortSpecifier":{"PortValue":45758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218282,"nanos":188318795},"http":{"id":"0e7c9de4-ba6f-463d-b4be-671370e59799","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e7c9de4-ba6f-463d-b4be-671370e59799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48274","PortSpecifier":{"PortValue":48274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e2fef77-316e-4095-8118-2a6994f88b60","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48274","PortSpecifier":{"PortValue":48274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218282,"nanos":227624701},"http":{"id":"2e2fef77-316e-4095-8118-2a6994f88b60","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e2fef77-316e-4095-8118-2a6994f88b60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45764","PortSpecifier":{"PortValue":45764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"989f5854-45eb-4e36-ac35-fde208dc75b7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45764","PortSpecifier":{"PortValue":45764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218282,"nanos":267118980},"http":{"id":"989f5854-45eb-4e36-ac35-fde208dc75b7","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"989f5854-45eb-4e36-ac35-fde208dc75b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42048","PortSpecifier":{"PortValue":42048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218301,"nanos":774480841},"http":{"id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5efe28d-a466-4bf0-b8f0-3cb910a85933","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43684","PortSpecifier":{"PortValue":43684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43684","PortSpecifier":{"PortValue":43684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218301,"nanos":815544642},"http":{"id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab68adf0-7f8e-4f4a-9dc5-6f941d28af3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5666a785-4753-4af5-b129-65652ec5e049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43692","PortSpecifier":{"PortValue":43692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5666a785-4753-4af5-b129-65652ec5e049","method":"GET","path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5666a785-4753-4af5-b129-65652ec5e049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43692","PortSpecifier":{"PortValue":43692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218301,"nanos":850990489},"http":{"id":"5666a785-4753-4af5-b129-65652ec5e049","method":"GET","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5666a785-4753-4af5-b129-65652ec5e049","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5666a785-4753-4af5-b129-65652ec5e049","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5666a785-4753-4af5-b129-65652ec5e049","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5666a785-4753-4af5-b129-65652ec5e049","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5666a785-4753-4af5-b129-65652ec5e049","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42064","PortSpecifier":{"PortValue":42064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","method":"GET","path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42064","PortSpecifier":{"PortValue":42064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218301,"nanos":888610818},"http":{"id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","method":"GET","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07778ebb-800a-42eb-b521-320ae4a1d25f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dca14f5-d4e3-4360-8fa8-042443d53a65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59952","PortSpecifier":{"PortValue":59952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a22aec0-30ec-4db5-8019-18d9822d071c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59952","PortSpecifier":{"PortValue":59952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218319,"nanos":303099974},"http":{"id":"1a22aec0-30ec-4db5-8019-18d9822d071c","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a22aec0-30ec-4db5-8019-18d9822d071c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44430","PortSpecifier":{"PortValue":44430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6097b2e-6205-4917-ace6-d5b675c57072","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44430","PortSpecifier":{"PortValue":44430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218319,"nanos":341525827},"http":{"id":"a6097b2e-6205-4917-ace6-d5b675c57072","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/auth-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6097b2e-6205-4917-ace6-d5b675c57072","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59966","PortSpecifier":{"PortValue":59966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59966","PortSpecifier":{"PortValue":59966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218319,"nanos":378797960},"http":{"id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QmIKdU9YR69In7dE_tqSvbRURDqifC3nriKkxgAl9TIf2yhY4sudGuhwiIju"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QmIKdU9YR69In7dE_tqSvbRURDqifC3nriKkxgAl9TIf2yhY4sudGuhwiIju\"}"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8994274b-25d3-4239-88b6-7abd07e94394","keyName":"e2e-auth-iso-a-7eaecc","subscription":"e2e-auth-iso-b0a87a","tenant":"e2e-shared-a-83e7d4","userId":"8994274b-25d3-4239-88b6-7abd07e94394","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/auth-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b0a87a"}
{"level":"info","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:11:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52330af8-c6bf-4f7b-9363-50b6b86efcf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20fc95dbeb24456baa0b4ce33f5e42b067ef44d0d9a123cd5e4dc81f77ca3763"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21d4af22e0312841bf9c249eca13b198b0396fba09df1e512c22afd04de61cc6"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0951e98c5ab1a06c4c781ad827f0348301bb989d4e404e1e5874bfcfe75c382"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1863e4a8db9c00d57502b8fcc2cdd2de632fec18fb5e7238ab1b0a199519cd8c"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8e201b794aa3f396ecb8aec3a3477466e40761fd2f0a73574126efa5b38e29"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6eadba4545be74b4f93873bd5d71cdf2d3ee505acfafa43b1cc02dd7df61e4"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/731583d82307211bf93dd976338c0714ed2d66d60dc5775658c97b883faa41a4"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6afad83d9675359c66bb8e95b9bb89d2603386268968f39de4fdc97980434d12"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ff4b0752fee21554dd60d18c91a1b1a3b46405190069541ea1fa36db4bc0dd"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1de2e26447cdf3ed7ef69ec2c87460ffb3b0a6fe83ab94472f5f5298c929d6"}
{"level":"info","ts":"2026-07-16T16:12:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1726c52fa5aeebc37df5c1065e65cee53886b0abc8fb2241edd856252b6c5397"}
{"level":"info","ts":"2026-07-16T16:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49a21ae9a24c0e47ae5730cc8def116972b19f5efb94ebcd845b3b9d198d1cdc"}
{"level":"info","ts":"2026-07-16T16:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/345b84b88f007d179b586d0f8cc723e418d7ce016e7716e74f8a3df398ed9f49"}
{"level":"info","ts":"2026-07-16T16:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/defc44415dc7ea26fe13539cfa3e537bd97e3731a5a1d88381baa8576e44b4d5"}
{"level":"info","ts":"2026-07-16T16:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e0fb0da9de86bfe684f5bf8713a92a69f0dbd5f2795471f97912439547a484"}
{"level":"info","ts":"2026-07-16T16:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f47e6414bfb3ea95baa613f199b4e4a3142952a57d8bd4eb0acf035fce2da20"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"debug","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"error","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"error","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"}
{"level":"debug","ts":"2026-07-16T16:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c46e5870074f1e199f00fb920d4aa5b35beeedb639c43fb557a2739669e5f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c46e5870074f1e199f00fb920d4aa5b35beeedb639c43fb557a2739669e5f6c"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f68317155b097ded25e0936b2f0b84a517e9cfe3089d05d9526915a1d1db96a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f68317155b097ded25e0936b2f0b84a517e9cfe3089d05d9526915a1d1db96a"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792b905242054fff975c2d5965ae1f8aa505d1c8dc1f2d03a3b3486471e32c03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"debug","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792b905242054fff975c2d5965ae1f8aa505d1c8dc1f2d03a3b3486471e32c03"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39752","PortSpecifier":{"PortValue":39752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87cca2c9-0ace-4546-9861-2312b85744dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39752","PortSpecifier":{"PortValue":39752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218409,"nanos":355706065},"http":{"id":"87cca2c9-0ace-4546-9861-2312b85744dd","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/sub-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87cca2c9-0ace-4546-9861-2312b85744dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45692","PortSpecifier":{"PortValue":45692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61a31f3a-5022-4e36-b5e2-86350cda3486","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45692","PortSpecifier":{"PortValue":45692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218409,"nanos":409774034},"http":{"id":"61a31f3a-5022-4e36-b5e2-86350cda3486","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/sub-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a31f3a-5022-4e36-b5e2-86350cda3486","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39764","PortSpecifier":{"PortValue":39764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39764","PortSpecifier":{"PortValue":39764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218409,"nanos":452196626},"http":{"id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","method":"GET","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RCW0IFDowwNjOE5X_36CNE4aQqZR4YVzjLZZv4VsTtLDTvGXXl5Y2AboAWTD"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RCW0IFDowwNjOE5X_36CNE4aQqZR4YVzjLZZv4VsTtLDTvGXXl5Y2AboAWTD\"}"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4df9d9e9-9495-4702-9d10-7a12ac235079","keyName":"e2e-sub-iso-8d5cf5","subscription":"e2e-a-only-a59aca","tenant":"e2e-shared-a-83e7d4","userId":"4df9d9e9-9495-4702-9d10-7a12ac235079","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/sub-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a59aca"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593ecbdb-b334-44ef-ab2f-a92dc1247d15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218409,"nanos":496974619},"http":{"id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","method":"GET","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZE38ROSawiHdMBHj_ybJoVVDRD4emK7KtrirHuFqiVf3BpiIptqWsNDWhMAN"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZE38ROSawiHdMBHj_ybJoVVDRD4emK7KtrirHuFqiVf3BpiIptqWsNDWhMAN\"}"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"35fcb73e-222a-4ac0-9f49-0fab05f666e1","keyName":"e2e-sub-iso-5b1f17","subscription":"e2e-b-only-a59aca","tenant":"e2e-shared-b-590f9a","userId":"35fcb73e-222a-4ac0-9f49-0fab05f666e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/sub-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a59aca"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f6f1d4-440f-44e5-b9d0-e684876e5c9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58112","PortSpecifier":{"PortValue":58112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58112","PortSpecifier":{"PortValue":58112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218419,"nanos":806458143},"http":{"id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/sub-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821e8b44-8fec-4e46-a4c1-6e61665f9e48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40068","PortSpecifier":{"PortValue":40068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40068","PortSpecifier":{"PortValue":40068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218419,"nanos":845480467},"http":{"id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/sub-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed2e815-f652-4e4d-a691-0f33a3c0e83a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58124","PortSpecifier":{"PortValue":58124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58124","PortSpecifier":{"PortValue":58124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218419,"nanos":880553191},"http":{"id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HjXNIKPjKlQKJJ4l_AS6KEWtCnLJ6g9buLIRmQkevlcvU1VA4mNId8MPF3bd"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HjXNIKPjKlQKJJ4l_AS6KEWtCnLJ6g9buLIRmQkevlcvU1VA4mNId8MPF3bd\"}"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d9a9e7f-2ba1-4f5f-b400-f22077fad95c","keyName":"e2e-sub-iso-e82944","subscription":"e2e-shared-sub-133b79","tenant":"e2e-shared-a-83e7d4","userId":"4d9a9e7f-2ba1-4f5f-b400-f22077fad95c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/sub-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-133b79"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba30ac5-e642-4173-8b46-d6aeb4f4e331","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40078","PortSpecifier":{"PortValue":40078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40078","PortSpecifier":{"PortValue":40078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218419,"nanos":907219372},"http":{"id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12lkitC8JX4RIabIa_59LNkonQe3WwjnUm0b2BhaTBjKwpPj4Xtlugj9GJnr5"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12lkitC8JX4RIabIa_59LNkonQe3WwjnUm0b2BhaTBjKwpPj4Xtlugj9GJnr5\"}"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f2da2fc7-6cce-49b1-9f18-da3e61388a16","keyName":"e2e-sub-iso-7c081d","subscription":"e2e-shared-sub-133b79","tenant":"e2e-shared-b-590f9a","userId":"f2da2fc7-6cce-49b1-9f18-da3e61388a16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/sub-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-133b79"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddef660-cbc0-44fe-b777-51bf4a8dc72d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24ecfb44bdadc699be92d40eda1ed6b5648b107969952a24bd1b3acda1ab9bc"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f259c4e0eb1f573886cecbd93ca60b3ac884c8b09239899eb932eb7f8bffab25"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/025c15425aad5693bee220e334bdf834549991b3c25e3a0e8b713f4ae2e94fb0"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89e553fd02fe75d765da9453be4676f21529ac58465b0dabd73835cd5ae36f3"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1293c6680dfbb24ca50711b96cafc6a1934b52725a02a203d386878cf54519"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ef9d90358aa8888cfe42f937106d7f32b263dc7fd8de084511113d275bcd30e"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af58e630c1c25411a324d5fa6b5dd4e73b4fd295f6e8bac12d8b54a80d5c431"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4e6207c179345dd18192fd4989f5eafddfd75197d48e3400eab2ba3b662e503"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04bec1e434912235c347be6345ded1c65d35c90f88bd133c8d9b390ee6fe69e9"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7becadece1465fe8c0d2a8132d33b46c1ade7e70329c228c51c1b8281be123d"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d202c44ccba236e40e948f6182ff61555486d1b5de7ed4d33e17a71e255065f"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/871b0fe24352b5b9d029da0a798b4ad1d53d5fb6e852cd54cd032536bc3e9e05"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3180c1dbdb88ee3578a347432800f39f7448d1d94ea57e8b1f388df8471ae707"}
{"level":"info","ts":"2026-07-16T16:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da8f716c588ff319be799576f8e125ad1c5f350d444e7ed81351a7c86df929bf"}
{"level":"info","ts":"2026-07-16T16:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802e9825960615ea40503c5686ae4c8dc516445226587788e7d349280cec4792"}
{"level":"info","ts":"2026-07-16T16:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d675232776e6cc778a91368a8a36a43274bbee7cae8c0b3c7a40a37d402302e"}
{"level":"debug","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"error","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"error","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"debug","ts":"2026-07-16T16:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792b905242054fff975c2d5965ae1f8aa505d1c8dc1f2d03a3b3486471e32c03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792b905242054fff975c2d5965ae1f8aa505d1c8dc1f2d03a3b3486471e32c03"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"error","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f68317155b097ded25e0936b2f0b84a517e9cfe3089d05d9526915a1d1db96a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f68317155b097ded25e0936b2f0b84a517e9cfe3089d05d9526915a1d1db96a"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c46e5870074f1e199f00fb920d4aa5b35beeedb639c43fb557a2739669e5f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c46e5870074f1e199f00fb920d4aa5b35beeedb639c43fb557a2739669e5f6c"}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"error","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T16:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T16:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58698","PortSpecifier":{"PortValue":58698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58698","PortSpecifier":{"PortValue":58698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218480,"nanos":820883621},"http":{"id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef80ec4-2cf0-43da-b460-bbb9b443e0a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52962","PortSpecifier":{"PortValue":52962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52962","PortSpecifier":{"PortValue":52962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218480,"nanos":889102589},"http":{"id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af61f0f3-1c95-49fd-bd7c-6e0f4e52bb82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58702","PortSpecifier":{"PortValue":58702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"496efd51-f027-45ac-8797-1a389a74d8b1","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58702","PortSpecifier":{"PortValue":58702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218480,"nanos":933382952},"http":{"id":"496efd51-f027-45ac-8797-1a389a74d8b1","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM\"}"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","subscription":"e2e-rate-iso-a-2eab0c","tenant":"e2e-shared-a-83e7d4","userId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-2eab0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2eab0c"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","selected_subscription":"e2e-rate-iso-a-2eab0c","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-2eab0c@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"496efd51-f027-45ac-8797-1a389a74d8b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40544","PortSpecifier":{"PortValue":40544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40544","PortSpecifier":{"PortValue":40544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218482,"nanos":190072},"http":{"id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM\"}"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","subscription":"e2e-rate-iso-a-2eab0c","tenant":"e2e-shared-a-83e7d4","userId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-2eab0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2eab0c"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","selected_subscription":"e2e-rate-iso-a-2eab0c","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-2eab0c@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ee34b3-1d0c-4eb3-81ec-d57fab83a7b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40560","PortSpecifier":{"PortValue":40560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd95648e-784f-44a8-8d8a-9951752b1f70","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40560","PortSpecifier":{"PortValue":40560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218483,"nanos":44158049},"http":{"id":"fd95648e-784f-44a8-8d8a-9951752b1f70","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NrsmQZV70hinX5XU_VXb7Sg9pz8z20ymwpoJcklBCER5mDM1l47PZLYdZqlM\"}"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","subscription":"e2e-rate-iso-a-2eab0c","tenant":"e2e-shared-a-83e7d4","userId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-2eab0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2eab0c"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f27e9b72-2d82-4a3c-89f5-e239754a73dc","keyName":"e2e-rate-a-2eab0c","selected_subscription":"e2e-rate-iso-a-2eab0c","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-2eab0c@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2eab0c","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd95648e-784f-44a8-8d8a-9951752b1f70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce508991-c613-4308-a498-7e2d0c549a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35248","PortSpecifier":{"PortValue":35248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce508991-c613-4308-a498-7e2d0c549a24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce508991-c613-4308-a498-7e2d0c549a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35248","PortSpecifier":{"PortValue":35248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218491,"nanos":936831248},"http":{"id":"ce508991-c613-4308-a498-7e2d0c549a24","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce508991-c613-4308-a498-7e2d0c549a24","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce508991-c613-4308-a498-7e2d0c549a24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce508991-c613-4308-a498-7e2d0c549a24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce508991-c613-4308-a498-7e2d0c549a24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce508991-c613-4308-a498-7e2d0c549a24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44100","PortSpecifier":{"PortValue":44100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b555687f-b1a5-4410-977e-b6a469f269c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44100","PortSpecifier":{"PortValue":44100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218491,"nanos":978689674},"http":{"id":"b555687f-b1a5-4410-977e-b6a469f269c0","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"]}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bf23babc9636"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=614b544e-fc16-4f84-9e54-4f0b3131f201"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c2dcdae2-5f01-4ed5-b6d4-6b20a09218d4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b555687f-b1a5-4410-977e-b6a469f269c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35262","PortSpecifier":{"PortValue":35262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35262","PortSpecifier":{"PortValue":35262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218492,"nanos":20083344},"http":{"id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9dc25d-036c-48e0-97e9-7eb3a8c49a14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35278","PortSpecifier":{"PortValue":35278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35278","PortSpecifier":{"PortValue":35278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218493,"nanos":57283254},"http":{"id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43583f88-6f53-4b4e-8906-34b9fbd0ee12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35280","PortSpecifier":{"PortValue":35280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35280","PortSpecifier":{"PortValue":35280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218494,"nanos":95098637},"http":{"id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03bc85d8-ad83-4289-b4a6-44faae9d9b4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"860eaa51-f962-4906-89f5-942d42b34335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"860eaa51-f962-4906-89f5-942d42b34335","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"860eaa51-f962-4906-89f5-942d42b34335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218495,"nanos":135873560},"http":{"id":"860eaa51-f962-4906-89f5-942d42b34335","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"860eaa51-f962-4906-89f5-942d42b34335","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"860eaa51-f962-4906-89f5-942d42b34335","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"860eaa51-f962-4906-89f5-942d42b34335","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"860eaa51-f962-4906-89f5-942d42b34335","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218496,"nanos":173009711},"http":{"id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478bbef3-60d3-469a-bdb1-ec6c3ac0087b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35318","PortSpecifier":{"PortValue":35318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35318","PortSpecifier":{"PortValue":35318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218497,"nanos":208343554},"http":{"id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a655ba9-b367-4eb3-bc43-e9ef54bc1978","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed0c163-2178-45db-9517-a0dff030451c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35322","PortSpecifier":{"PortValue":35322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ed0c163-2178-45db-9517-a0dff030451c","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed0c163-2178-45db-9517-a0dff030451c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35322","PortSpecifier":{"PortValue":35322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218498,"nanos":244038599},"http":{"id":"5ed0c163-2178-45db-9517-a0dff030451c","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ed0c163-2178-45db-9517-a0dff030451c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed0c163-2178-45db-9517-a0dff030451c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed0c163-2178-45db-9517-a0dff030451c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed0c163-2178-45db-9517-a0dff030451c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35334","PortSpecifier":{"PortValue":35334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35334","PortSpecifier":{"PortValue":35334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218499,"nanos":283076793},"http":{"id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0e84cd-f915-4a9a-af97-2d4609515de0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35344","PortSpecifier":{"PortValue":35344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","method":"POST","path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions","host":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35344","PortSpecifier":{"PortValue":35344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218500,"nanos":319974807},"http":{"id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","method":"POST","headers":{":authority":"e2e-shared-a-83e7d4.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C8QvBvB5As1r4Zp_VJUTOTD6XkfkWSnodj5KXWWPkgCV4YKegV3qFsyFPIL\"}"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","subscription":"e2e-rate-iso-a-df8f42","tenant":"e2e-shared-a-83e7d4","userId":"d03cb137-c566-426e-b032-55e979edeb3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\",\"requestedSubscription\":\"e2e-rate-iso-a-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-83e7d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df8f42"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d03cb137-c566-426e-b032-55e979edeb3a","keyName":"e2e-rate-a-df8f42","selected_subscription":"e2e-rate-iso-a-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-a-83e7d4/e2e-rate-iso-a-df8f42@ai-tenant-e2e-shared-a-83e7d4/rate-test-model-83e7d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83e7d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df8f42","namespace":"ai-tenant-e2e-shared-a-83e7d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"845bebc9-fa4d-41b0-9fd3-e6c3d2cdcb8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44110","PortSpecifier":{"PortValue":44110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","method":"POST","path":"/ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a/v1/completions","host":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44110","PortSpecifier":{"PortValue":44110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784218500,"nanos":354757654},"http":{"id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","method":"POST","headers":{":authority":"e2e-shared-b-590f9a.apps.6a187472-2886-4a65-a670-bf23babc9636.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Si2gyfrts36WfkYX_2q3qtZODAM7NiGGTt5H33qDiAo6ZhJQWvKe49XSPAx5"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Si2gyfrts36WfkYX_2q3qtZODAM7NiGGTt5H33qDiAo6ZhJQWvKe49XSPAx5\"}"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f20596b-7254-4e3d-bc9e-20bc8057b73f","keyName":"e2e-rate-b-df8f42","subscription":"e2e-rate-iso-b-df8f42","tenant":"e2e-shared-b-590f9a","userId":"4f20596b-7254-4e3d-bc9e-20bc8057b73f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a\",\"requestedSubscription\":\"e2e-rate-iso-b-df8f42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-590f9a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-590f9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-df8f42","namespace":"ai-tenant-e2e-shared-b-590f9a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-df8f42"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f20596b-7254-4e3d-bc9e-20bc8057b73f","keyName":"e2e-rate-b-df8f42","selected_subscription":"e2e-rate-iso-b-df8f42","selected_subscription_key":"ai-tenant-e2e-shared-b-590f9a/e2e-rate-iso-b-df8f42@ai-tenant-e2e-shared-b-590f9a/rate-test-model-590f9a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-590f9a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-df8f42","namespace":"ai-tenant-e2e-shared-b-590f9a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T16:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ecaa0f-cd45-467c-a961-0b7b41a26dcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64952ddbbb836fccbbf775073486ee30770ee02a4d135282d43648ab7f4f623e"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a26e45900e49ca0714d485856c368c924527b6d926d134e55d1b7d8cbf21e579"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abc043839ce694fc5157b9e694ea2e75a7a0a0d3ade4ff84323fbce76b29a934"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d26d18dc195a415e18b6cef23dab8ef74256958c45efa1e57f1ec407037573e"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed42a1682fa00dfd7c6d541f05d8bcc492585d5d4c77c49ed1e671efe1e8e2f7"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aa99f71327eaec5adb1387ca8ff0e39cad4a7c0e2da605fc83d34eaf1e0f9c7"}
{"level":"info","ts":"2026-07-16T16:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d82c32ecf04b33bd0f0c339e9305f2c26ff056e875e21e2c05de525888f47eab"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf6d38a05797b02f9d8812ad2417ed4e2aa73eaea8f48de25fd5bbd97ce5ac75"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aae77c95bc0e034c5510e54163ea3c08c12ae395d0c9457cd5c23806373fdb60"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0784081214cce03fe863db2813364da66993d17a723e36021c5b93f361f34589"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9d49ed249d10e15d628752f4fcd7874336bf0c404f671abb2888166bf166b26"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/453dc2076454da96b9c428413dcf74110a15239d5d1f58459e0c699052ad3fa4"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a71fb36a219acc680b968ec4de91168148b999e5ec5c6773d83bfa827646fa80"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b6028e35e8080670640854d8ab9165d6ab5b0e8c94f11ac8f87bdf8cce3c6b"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e8407169f93e6f3e018d1cae979dc1e0e4b27f1b56ef4bb7217bf69c0ae71e"}
{"level":"info","ts":"2026-07-16T16:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e78c2a168c977a9d7c1f6c56e5d40a21e9d6a7815c6143345a00201675ee4e"}
{"level":"info","ts":"2026-07-16T16:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/792b905242054fff975c2d5965ae1f8aa505d1c8dc1f2d03a3b3486471e32c03"}
{"level":"info","ts":"2026-07-16T16:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0974655576314588b71fd74a1e5f8d05ab6e4b57d9e5cb496c0c514b71fc57c"}
{"level":"info","ts":"2026-07-16T16:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f68317155b097ded25e0936b2f0b84a517e9cfe3089d05d9526915a1d1db96a"}
{"level":"info","ts":"2026-07-16T16:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c46e5870074f1e199f00fb920d4aa5b35beeedb639c43fb557a2739669e5f6c"}
{"level":"info","ts":"2026-07-16T16:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e186d57e247ba5e26154f4fb68c9124b6a46f539dffe5297dc9db07d04a4de"}
{"level":"info","ts":"2026-07-16T16:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431c13c7bf8ebb7fce96ea4dc5345e5d5dd5ca903d4b6792d7490d5156f842b2"}
{"level":"info","ts":"2026-07-16T16:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2ebf898ad40719a80d0b381dbc17515194554e811e1ba391b283ffff1ca8324"}
{"level":"info","ts":"2026-07-16T16:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b08caa399d56faf5d0389efec922c3d8838919d2a024c011e08e1227acd16f70"}