--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"error","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:13:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:13:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:13:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52166","PortSpecifier":{"PortValue":52166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52166","PortSpecifier":{"PortValue":52166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176049,"nanos":716797949},"http":{"id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f688611-dbbf-4fc0-a527-1d0f2f6568a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46254","PortSpecifier":{"PortValue":46254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc82dccc-1851-47b9-9d72-317041487bd6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46254","PortSpecifier":{"PortValue":46254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176049,"nanos":749532342},"http":{"id":"fc82dccc-1851-47b9-9d72-317041487bd6","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/auth-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc82dccc-1851-47b9-9d72-317041487bd6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"392accae-f418-475f-a261-4a6fc2866f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52180","PortSpecifier":{"PortValue":52180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"392accae-f418-475f-a261-4a6fc2866f5b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"392accae-f418-475f-a261-4a6fc2866f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52180","PortSpecifier":{"PortValue":52180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176049,"nanos":786314177},"http":{"id":"392accae-f418-475f-a261-4a6fc2866f5b","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"392accae-f418-475f-a261-4a6fc2866f5b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"392accae-f418-475f-a261-4a6fc2866f5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"392accae-f418-475f-a261-4a6fc2866f5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"392accae-f418-475f-a261-4a6fc2866f5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"392accae-f418-475f-a261-4a6fc2866f5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46264","PortSpecifier":{"PortValue":46264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46264","PortSpecifier":{"PortValue":46264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176049,"nanos":824485723},"http":{"id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/auth-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cab652c-7384-44aa-ae23-bbd7bab56c75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"error","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"error","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176089,"nanos":983982036},"http":{"id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b82493e-8af5-4e0c-9e56-9b434f8d78ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33894","PortSpecifier":{"PortValue":33894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96327c8b-be74-4e88-b66e-8807b601df5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33894","PortSpecifier":{"PortValue":33894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176090,"nanos":18787297},"http":{"id":"96327c8b-be74-4e88-b66e-8807b601df5b","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/auth-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96327c8b-be74-4e88-b66e-8807b601df5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","method":"GET","path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176090,"nanos":54601718},"http":{"id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","method":"GET","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/auth-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7b2a422-a199-4658-8e41-3efc8c7c6bd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","method":"GET","path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176090,"nanos":81824843},"http":{"id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","method":"GET","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67dc1d09-dd44-4214-8f9a-790a9df080f9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec958956-fbc5-418a-8e6d-3cf0ba546b40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"error","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"error","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"error","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"debug","ts":"2026-07-27T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34292","PortSpecifier":{"PortValue":34292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34292","PortSpecifier":{"PortValue":34292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176128,"nanos":60477792},"http":{"id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2788b0d1-06b6-4fb2-a85d-6a78064b5568","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2643ffc0-76e6-484d-aed2-c897e43820ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176128,"nanos":95913464},"http":{"id":"2643ffc0-76e6-484d-aed2-c897e43820ea","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/auth-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2643ffc0-76e6-484d-aed2-c897e43820ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34294","PortSpecifier":{"PortValue":34294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd303011-f77a-409a-8a0e-daddc98b6093","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34294","PortSpecifier":{"PortValue":34294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176128,"nanos":136326646},"http":{"id":"dd303011-f77a-409a-8a0e-daddc98b6093","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CJU86X93T6QjPvxG_3mDhLWY5NUhuXfiNtr9485D9cfZdATcmrrN8TybTj8b"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CJU86X93T6QjPvxG_3mDhLWY5NUhuXfiNtr9485D9cfZdATcmrrN8TybTj8b\"}"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59a0752a-d930-45f7-9ec4-5d58a7c79906","keyName":"e2e-auth-iso-a-f87646","subscription":"e2e-auth-iso-e8f613","tenant":"e2e-shared-a-addd0c","userId":"59a0752a-d930-45f7-9ec4-5d58a7c79906","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/auth-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e8f613"}
{"level":"info","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:15:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd303011-f77a-409a-8a0e-daddc98b6093","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7b33b1e2569b6b179ff77634d3d87b030af07313c4e143ef18ce15e753ce347"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d352a61342b54043f3947a5d32a3433f04e01aef8a641f3c6aafce41bab6bf"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49d59667198bdefd2ccaf94643dd3f6c61efce11fc90c740c5969341ebb6febc"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a26137d336465173a5324f7de641fbc62629d41127472dec3b551e11abb04fd3"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5272dbc6ddefe50d2fba7ccf3bd07fb27c81a2d72593d9d96b5b2b9591797ac9"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95a91b7c60102a3d6c5f7655f4efd274fdef61ccd535423bf7d113e36103e146"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5ee289d936bed901a282238c4553df3e1092f24a44e8ed042d39b2511a5022"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1d329452595846d217ec70ca691e8f9cc00d474da6b99d8b8d14c6ee8c9afe1"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66402e8bf9a3d240d5cb1bd64e43bc97d77172022300f73200d0907584b570a7"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c13b328a1eeb10111afaccbf4f05a4b0c43046f3459af81cd2d0052fe072a1"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7741186dca0da10120cd3f2815b3e70c190d99143ad509994d69af3f34e21352"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22bb07a7d3953eb8a5ea1ecda11a4b92a8393a6ac7e1570f700f35c333da6d16"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e61030102d2699b2911fbf0ba91028330469058258476d6d1d9311c1a66042bf"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/426c72a243f968adb407f83498d4783c75c8851295c0e242ef4959e20b9c0c71"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43faa1ddf96d7055cd6116b5938fc576224cf0bb1d20368e89b4c5a2289ccb74"}
{"level":"info","ts":"2026-07-27T18:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9460e188a2b04cc2e37871dd10fc505f379ff8ce73ef90cd49b62adb846fb321"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6"}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7"}
{"level":"info","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"}
{"level":"error","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44044","PortSpecifier":{"PortValue":44044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fedaf84-549c-46d8-a330-be50e9092e70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44044","PortSpecifier":{"PortValue":44044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176212,"nanos":680084594},"http":{"id":"8fedaf84-549c-46d8-a330-be50e9092e70","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/sub-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fedaf84-549c-46d8-a330-be50e9092e70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52198","PortSpecifier":{"PortValue":52198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52198","PortSpecifier":{"PortValue":52198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176212,"nanos":717274778},"http":{"id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/sub-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cad401d7-efbb-40c3-9f2c-515211ddd2f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176212,"nanos":754400477},"http":{"id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","method":"GET","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YPMQ4G3iu9aD3ibF_VsIEFZLdpWIMMNQ6QNPBYfOCijtAzgNEsY9o6uUcp8B"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YPMQ4G3iu9aD3ibF_VsIEFZLdpWIMMNQ6QNPBYfOCijtAzgNEsY9o6uUcp8B\"}"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e85ad02-e8b8-42b7-a0d7-d0bea7149e56","keyName":"e2e-sub-iso-6c2274","subscription":"e2e-a-only-db38e0","tenant":"e2e-shared-a-addd0c","userId":"8e85ad02-e8b8-42b7-a0d7-d0bea7149e56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/sub-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-db38e0"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41fdb971-d44a-4ac6-bb62-5bf7d05d3a16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52206","PortSpecifier":{"PortValue":52206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52206","PortSpecifier":{"PortValue":52206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176212,"nanos":792989907},"http":{"id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","method":"GET","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YRUfaugeHFR93mkN_vSSn5EGP7i6Q50j78IQtzHLIb1BUHdAfUG0PDW5v983"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YRUfaugeHFR93mkN_vSSn5EGP7i6Q50j78IQtzHLIb1BUHdAfUG0PDW5v983\"}"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59966ffb-81ba-44af-a0ba-3ff5c58f59da","keyName":"e2e-sub-iso-071051","subscription":"e2e-b-only-db38e0","tenant":"e2e-shared-b-1706dd","userId":"59966ffb-81ba-44af-a0ba-3ff5c58f59da","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/sub-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-db38e0"}
{"level":"info","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e6ea3bd-e5d5-4245-b1df-dc90e923c2b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47610","PortSpecifier":{"PortValue":47610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f352073-0259-437d-b11f-f3e9cebc9620","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47610","PortSpecifier":{"PortValue":47610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176232,"nanos":452845166},"http":{"id":"8f352073-0259-437d-b11f-f3e9cebc9620","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/sub-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f352073-0259-437d-b11f-f3e9cebc9620","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34876","PortSpecifier":{"PortValue":34876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"578a9089-b2ca-4dc1-adc9-118801eb6957","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34876","PortSpecifier":{"PortValue":34876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176232,"nanos":492556636},"http":{"id":"578a9089-b2ca-4dc1-adc9-118801eb6957","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/sub-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"578a9089-b2ca-4dc1-adc9-118801eb6957","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47626","PortSpecifier":{"PortValue":47626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47626","PortSpecifier":{"PortValue":47626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176232,"nanos":531183469},"http":{"id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H6CddxgqzAU8GAx_niLOVOUxwBqf4UmG4OpjzNqE5XyFYexDuSkjDor2EQR"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H6CddxgqzAU8GAx_niLOVOUxwBqf4UmG4OpjzNqE5XyFYexDuSkjDor2EQR\"}"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f03d5d53-46c2-4e27-af29-21f7cc9d3386","keyName":"e2e-sub-iso-baad8f","subscription":"e2e-shared-sub-8fab13","tenant":"e2e-shared-a-addd0c","userId":"f03d5d53-46c2-4e27-af29-21f7cc9d3386","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/sub-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8fab13"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf8cbcc-5d09-4fc7-86e9-1f96735b60d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34888","PortSpecifier":{"PortValue":34888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34888","PortSpecifier":{"PortValue":34888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176232,"nanos":556139012},"http":{"id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t5dlwYfnq2J0lGz6_LZ3vf4oXWLtERsKykMrfUnFcd7CmhMNdWE4V9VRhhxX"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t5dlwYfnq2J0lGz6_LZ3vf4oXWLtERsKykMrfUnFcd7CmhMNdWE4V9VRhhxX\"}"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dc9d136d-cd7e-46bd-bd83-c3a24f7bda2f","keyName":"e2e-sub-iso-930d99","subscription":"e2e-shared-sub-8fab13","tenant":"e2e-shared-b-1706dd","userId":"dc9d136d-cd7e-46bd-bd83-c3a24f7bda2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/sub-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8fab13"}
{"level":"info","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f20e59bf-804e-474a-9b43-fe12f3c0377d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf541a8b2ca643e9ebaf215e24df90bb2d9f57def29c5c20c1d16fcbdf94ce9c"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e0049657bd97f4c7b46747b1c515c483a7a1c1fee0db248431d22daae839438"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8221bd5b5351854696eeba4147ab06759c0c491fc3e10d1833056690ae91386c"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07e1bec9fedc0817a3807c83b5a4ecb95aa693934db1163d1dbd83bcf0a521d6"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd1a3739922a79d4120d9968ec99df191b657c130f918050e8f20d050ef64c8c"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb9a5ccc139a7ed0e6a2c87819fbf19ba22159d4789c88314e0d37e7085ccfc"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ad4acce4dc29840e2e3eff0995ebc63cd1a2d9e22bfde30f686644a78977006"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd113c77fc29a498ed57b2e7f5f73dddd94c7bfb9eaeb6891c9bd2edc36a06ce"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bea9706cc07100a42cb2d03ea6bb45f01977dc570f0f060bf97e57f2bc13690"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/811f986e73b8424f900871c7fe47e5ab874e3f816dde8a645f16bb8f30f0112a"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c98ea8324dd0fd11d0b4f4dedf252b031410170cd1dfdf2dda9994cf9279a21e"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bf0029c44cb418e4539a6ae4d3dea9625d979fa570e049b5b3a89d1dba270a7"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a074036047e2cb96f7867e01d76e5ec129d80cc6637f42f0f5db87f8d48570d"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530870dff3e0dfa466aff75dcfca8d731ae698f2405b4293d17a64aa987a3a78"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03786c07602549701d79700136a5a5ffd78e526fda2085c553fcb2b44bbde481"}
{"level":"info","ts":"2026-07-27T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a1ed0d6ea6b3f0d5549349fa429eb8ca6c882e7a30c8be9ac55cb1e6b15746b"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5"}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09"}
{"level":"info","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:18:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:18:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53626","PortSpecifier":{"PortValue":53626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53626","PortSpecifier":{"PortValue":53626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176321,"nanos":688261618},"http":{"id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f987933-4dfb-4845-87cf-54fbeceb54e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38728","PortSpecifier":{"PortValue":38728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5072fa89-0d6c-4024-97cc-5271511c6894","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38728","PortSpecifier":{"PortValue":38728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176321,"nanos":731134793},"http":{"id":"5072fa89-0d6c-4024-97cc-5271511c6894","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5072fa89-0d6c-4024-97cc-5271511c6894","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53640","PortSpecifier":{"PortValue":53640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53640","PortSpecifier":{"PortValue":53640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176321,"nanos":773446938},"http":{"id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR\"}"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","subscription":"e2e-rate-iso-a-8c32f1","tenant":"e2e-shared-a-addd0c","userId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-8c32f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c32f1"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","selected_subscription":"e2e-rate-iso-a-8c32f1","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-8c32f1@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:18:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bce462-fe0a-4f23-b936-8faa1eabc65c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45656","PortSpecifier":{"PortValue":45656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45656","PortSpecifier":{"PortValue":45656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176322,"nanos":862730796},"http":{"id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR\"}"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","subscription":"e2e-rate-iso-a-8c32f1","tenant":"e2e-shared-a-addd0c","userId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-8c32f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c32f1"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","selected_subscription":"e2e-rate-iso-a-8c32f1","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-8c32f1@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:18:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b07584-546b-4b8a-b7c9-0b55b84cdfba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45672","PortSpecifier":{"PortValue":45672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45672","PortSpecifier":{"PortValue":45672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176323,"nanos":899502161},"http":{"id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sXWnR9Nh9tdH1OYf_DSHpQxWvfS7NWKzBVmCbo5KlWoqv8PDCrCxYhCKl0WR\"}"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","subscription":"e2e-rate-iso-a-8c32f1","tenant":"e2e-shared-a-addd0c","userId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-8c32f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c32f1"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46c3e64f-ab4d-42e7-bfac-cb4c7232e4bb","keyName":"e2e-rate-a-8c32f1","selected_subscription":"e2e-rate-iso-a-8c32f1","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-8c32f1@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c32f1","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:18:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1033b0e-1bc5-40a9-b18f-b4d08ad899ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176342,"nanos":975215868},"http":{"id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.86:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd0ab0b-e1fb-4189-be54-67e509d2cf24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39722","PortSpecifier":{"PortValue":39722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39722","PortSpecifier":{"PortValue":39722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176343,"nanos":13228526},"http":{"id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.89:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"485f6579-9352-49f4-a2f0-a9a89cb0c6e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176343,"nanos":48257637},"http":{"id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"293fd830-4190-4ee0-b0ca-7854e9fa2ae2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41328","PortSpecifier":{"PortValue":41328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41328","PortSpecifier":{"PortValue":41328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176344,"nanos":83623220},"http":{"id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3795a67b-83e4-47ad-97a2-0933a7ea4ed3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41344","PortSpecifier":{"PortValue":41344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41344","PortSpecifier":{"PortValue":41344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176345,"nanos":117570321},"http":{"id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8be525-f0ad-45dd-8f84-2f381e01fba8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41350","PortSpecifier":{"PortValue":41350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30c55974-924e-4a92-a00d-8a52372af2b5","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41350","PortSpecifier":{"PortValue":41350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176346,"nanos":152082679},"http":{"id":"30c55974-924e-4a92-a00d-8a52372af2b5","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30c55974-924e-4a92-a00d-8a52372af2b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41362","PortSpecifier":{"PortValue":41362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41362","PortSpecifier":{"PortValue":41362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176347,"nanos":203712654},"http":{"id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c36b1fc-4bd6-4667-8730-4379c24f1675","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41378","PortSpecifier":{"PortValue":41378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41378","PortSpecifier":{"PortValue":41378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176348,"nanos":243050590},"http":{"id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fa4e0f6-79b2-4aaa-a1d5-e969b85b336d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41386","PortSpecifier":{"PortValue":41386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41386","PortSpecifier":{"PortValue":41386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176349,"nanos":276906601},"http":{"id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a8dccc0-f6ff-4344-94fb-9a63565ed5d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41402","PortSpecifier":{"PortValue":41402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","method":"POST","path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions","host":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41402","PortSpecifier":{"PortValue":41402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.86:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176350,"nanos":317415155},"http":{"id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","method":"POST","headers":{":authority":"e2e-shared-a-addd0c.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CZtqXU1QWht7aBBJ_G6dap8P1kr7o7grIpTU5FuIp8hUlBqCSBw95c4Zx49r\"}"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","subscription":"e2e-rate-iso-a-21dab9","tenant":"e2e-shared-a-addd0c","userId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\",\"requestedSubscription\":\"e2e-rate-iso-a-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-addd0c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3315d1c5-dbb3-4534-a107-95d6bb578d21","keyName":"e2e-rate-a-21dab9","selected_subscription":"e2e-rate-iso-a-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-a-addd0c/e2e-rate-iso-a-21dab9@ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-addd0c/models/facebook/opt-125m","name":"rate-test-model-addd0c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21dab9","namespace":"ai-tenant-e2e-shared-a-addd0c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-addd0c/rate-test-model-addd0c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5290790a-be0e-4c19-9254-98dc7b2e1dc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39730","PortSpecifier":{"PortValue":39730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","method":"POST","path":"/ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd/v1/completions","host":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39730","PortSpecifier":{"PortValue":39730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.89:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176350,"nanos":351230320},"http":{"id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","method":"POST","headers":{":authority":"e2e-shared-b-1706dd.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lDD0T6Tbs41Xjr1F_y03euKHcZqoFwHWANL0fBLPJZdQZhLM8W7M7II3Jvbi"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lDD0T6Tbs41Xjr1F_y03euKHcZqoFwHWANL0fBLPJZdQZhLM8W7M7II3Jvbi\"}"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04aa475c-458d-4144-81c0-1a56ee28ef1d","keyName":"e2e-rate-b-21dab9","subscription":"e2e-rate-iso-b-21dab9","tenant":"e2e-shared-b-1706dd","userId":"04aa475c-458d-4144-81c0-1a56ee28ef1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd\",\"requestedSubscription\":\"e2e-rate-iso-b-21dab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1706dd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m","name":"rate-test-model-1706dd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-21dab9","namespace":"ai-tenant-e2e-shared-b-1706dd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd"}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-21dab9"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04aa475c-458d-4144-81c0-1a56ee28ef1d","keyName":"e2e-rate-b-21dab9","selected_subscription":"e2e-rate-iso-b-21dab9","selected_subscription_key":"ai-tenant-e2e-shared-b-1706dd/e2e-rate-iso-b-21dab9@ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1706dd/models/facebook/opt-125m","name":"rate-test-model-1706dd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-21dab9","namespace":"ai-tenant-e2e-shared-b-1706dd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1706dd/rate-test-model-1706dd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:19:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f55f2e4a-5504-4012-82f5-ac9532fefae6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91e7eba4bb6cc24cfc7600d2454826283bdafd11849c4464fd31a018e769ce5"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49d1991f768b7179f72586c322e0387244ad43fe573f2bf22d96d5cf39f5fb02"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2dbc0a7d8bedcfc83391cf8240199ff68a82b020028d2bc47d1b8aa06fb2d60"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a25936c63639e59da14747a58ef515beb97c908c1ec82929406c31db48559ad"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08cf79d043052212d5b9d89f0841df536a3c3c82528bc889f1e4b80160c9346d"}
{"level":"info","ts":"2026-07-27T18:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594e9f627f273d9a1ec48cae01ce9a912bc7c8aad0079370eb4f704c4dd4a062"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d79cc6078256c523ed6d99ff06bbdc0ed64d8ab088ca27d72f6f5cfeeb0e6d5"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf4e985b9c2054568c4d3577c0c1449ba5aa50348d1e9131814c2a4bc859fb15"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d76763893b2b34b27dbe5247bd27d94cf22bdd434013a76414aa26425c704a93"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12add4d24bc8fdb51e65f45c1a62bba7b0f2079e00a0c9d3e1047799e33f9f9d"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602d592290475e9739b657d8e2f3ce7679ca4922f3baa2f2a80319ee7cd57189"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9d15171e202b1ad51f2c91331ee19ac8230fdb93532ea55e9a5f85f6748aa2f"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9481aa9e01168fa96061b7829feb52dcb35a87117d0177653ebe91bed117d4e7"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c507e672607c960a48b62cc5fee190ddb7c72585f4fb7be721fe9c12ca6bff4"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7f81039fa3b30957b27ce58840615068e4cf0079bc64b1a98fca94c4505fd81"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a89334dccd8564f921a3cda819e6b81a9e7a6a5ff3199eda36fc48a26672a54"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f488b9f4da92411fdf90d8952fbd610d820fc2ef3100c30dbb3906b7776c5b"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58cdb943d404f57f5a9193401c30cd118bae4530628ff9549ad9b98b550b88c6"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a999c13f9ecc23f10064dd66458c91ab9cddbb73518e65344e1cc8827191a4b"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b951515904d1a902f62bae7f2c284d0504231b216e37e5951c34d250cdb509"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43cf9736aa765dd311f2f481fb7a61d5bca3df7df1c243d25457aa5bf89b4a07"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/664341e0742edd9a5b2adaa86e84cfd2a5be13a421bafe8746dd674a12688071"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624896c1393584a659a7fc26c0fcbe8e6868982283fc8fe3585fe701ad917e6d"}
{"level":"info","ts":"2026-07-27T18:19:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6d4979c0fb655b33c84329f8d29d5aadb960fb574d55461279cf7a22886dc09"}
{"level":"info","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176417,"nanos":156043912},"http":{"id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","method":"POST","headers":{":authority":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725d2209-e261-4b2d-9259-1dff9a58ee5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176417,"nanos":235105956},"http":{"id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","method":"POST","headers":{":authority":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4AKkn6Qoeqd3yPh_m7fp3tRpB1PtjZ2gjQSRQDlnOqWnysiSd61px7g8QCS"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4AKkn6Qoeqd3yPh_m7fp3tRpB1PtjZ2gjQSRQDlnOqWnysiSd61px7g8QCS\"}"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ceef88e-a4c1-480d-9ae8-025f12fdf798","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"0ceef88e-a4c1-480d-9ae8-025f12fdf798","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ceef88e-a4c1-480d-9ae8-025f12fdf798","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:20:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc0c751-12a2-44e0-bb75-f0fb0186d68b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da"}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T18:20:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"}
{"level":"info","ts":"2026-07-27T18:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"}
{"level":"info","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299eab6e-1c18-422d-a0de-953a2f841626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59536","PortSpecifier":{"PortValue":59536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.92:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"299eab6e-1c18-422d-a0de-953a2f841626","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-f4a7a7.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299eab6e-1c18-422d-a0de-953a2f841626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59536","PortSpecifier":{"PortValue":59536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.92:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176472,"nanos":400860593},"http":{"id":"299eab6e-1c18-422d-a0de-953a2f841626","method":"POST","headers":{":authority":"e2e-ipp-a-f4a7a7.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"299eab6e-1c18-422d-a0de-953a2f841626","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"]}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"299eab6e-1c18-422d-a0de-953a2f841626","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9bd87213719a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a39eaf15-eef0-4ea2-a1fd-7a4b278b058f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4902d4ab-d0c3-444f-87fe-f1bdc61ba3cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.92:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-f4a7a7.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f4a7a7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299eab6e-1c18-422d-a0de-953a2f841626","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299eab6e-1c18-422d-a0de-953a2f841626","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:21:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299eab6e-1c18-422d-a0de-953a2f841626","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59542","PortSpecifier":{"PortValue":59542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.92:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","method":"POST","path":"/ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7/v1/chat/completions","host":"e2e-ipp-a-f4a7a7.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59542","PortSpecifier":{"PortValue":59542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.92:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785176474,"nanos":468407374},"http":{"id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","method":"POST","headers":{":authority":"e2e-ipp-a-f4a7a7.apps.6bf7282c-92d2-41e3-88b4-9bd87213719a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1lJy8r1s6jJze2vd_jwYvz4OPEHgooRqmvVTL4UbAv9LFp9UwV1TfRn0uRCv"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-f4a7a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1lJy8r1s6jJze2vd_jwYvz4OPEHgooRqmvVTL4UbAv9LFp9UwV1TfRn0uRCv\"}"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f4a7a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b685e60d-a915-49fc-a923-c402ddb5f382","keyName":"e2e-ipp-f4a7a7","subscription":"ipp-route-f4a7a7-sub","tenant":"e2e-ipp-a-f4a7a7","userId":"b685e60d-a915-49fc-a923-c402ddb5f382","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-f4a7a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7\",\"requestedSubscription\":\"ipp-route-f4a7a7-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f4a7a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f4a7a7/models/facebook/opt-125m","name":"ipp-route-f4a7a7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f4a7a7-sub","namespace":"ai-tenant-e2e-ipp-a-f4a7a7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7"}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f4a7a7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-f4a7a7-sub"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b685e60d-a915-49fc-a923-c402ddb5f382","keyName":"e2e-ipp-f4a7a7","selected_subscription":"ipp-route-f4a7a7-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7-sub@ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f4a7a7/models/facebook/opt-125m","name":"ipp-route-f4a7a7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f4a7a7-sub","namespace":"ai-tenant-e2e-ipp-a-f4a7a7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f4a7a7/ipp-route-f4a7a7"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ae3b87-4054-42fa-8e3c-491feb9bad6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13ada16beb895ab615a152a83c6216a52247a404d5ce98b00a2ac761be3a825"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d1b8eb828d5251917d7714bd0d51e8f4d1c84500ae896ebc06dfc0cbcd5bc4"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d78f5e2c16315e74675ddaaaea6f88de06348aaa4b27ebeecddc957663dd4434"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7135d384a3991cb74c105184b3f62af155bb1c57081ecb3efafe204f5bf40ee9"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfe8c58b0e4615640da5be2abf0d77423b1400e707c7dd2768777820555f4ed3"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc850515bdc2bc8d84356c1ef49ae310e720ec3ed939d5beaf8aef4dab4f02a7"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be4793cc48be3944e0237d5fa1b865cdca288c6d18655ddc52c04d5be51665c"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a4efa376851b7a467590885d6416ff92f08de7d9525c3a94bf0ae8143a5c2f1"}
{"level":"info","ts":"2026-07-27T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed9964c82385606da20ce824681562550c8cf1aee8571fac2d4a1e1c50ef6d1"}
{"level":"info","ts":"2026-07-27T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e884274bab9a059b90b6ce5f1cfd7057ae0c58b3a99d38b6bfdd62a0200f4d35"}
{"level":"info","ts":"2026-07-27T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc735d54d43c3c0303b37946088149f0048e08de9d844d3edf33cf93d806d886"}
{"level":"info","ts":"2026-07-27T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60cd6a06522c8e8bd5340c5f79f40c7b4c200f88bfe24b2dc9e8122ca88873da"}