--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9114a05079fc9dd2ac6f942b200728512e452a805bfaed3a6311a1dc726cc14"}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a3f5285198be420cb0943c8c42decbb16a8933c5ab076e35beb5e58f7096a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9114a05079fc9dd2ac6f942b200728512e452a805bfaed3a6311a1dc726cc14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"}
{"level":"error","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30"}
{"level":"error","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"error","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"}
{"level":"error","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883"}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cde3bc0a-202a-4606-9877-605c6165cda4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973116,"nanos":867585726},"http":{"id":"cde3bc0a-202a-4606-9877-605c6165cda4","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cde3bc0a-202a-4606-9877-605c6165cda4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45784","PortSpecifier":{"PortValue":45784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45784","PortSpecifier":{"PortValue":45784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973116,"nanos":929137512},"http":{"id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"906feeb7-b3a6-44a7-be57-ee03d98630c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38106","PortSpecifier":{"PortValue":38106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","method":"GET","path":"/maas-api/v1/api-keys/6de70d8f-3fba-4adc-8ddb-dbd4b8d7a528","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38106","PortSpecifier":{"PortValue":38106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973116,"nanos":989780496},"http":{"id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","method":"GET","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6de70d8f-3fba-4adc-8ddb-dbd4b8d7a528",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6de70d8f-3fba-4adc-8ddb-dbd4b8d7a528",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ce9521-46bd-4cc3-9c57-d662ee2bc81f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","method":"GET","path":"/maas-api/v1/api-keys/42233663-aa29-46c6-9c1d-227efa290485","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973117,"nanos":22225247},"http":{"id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","method":"GET","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/42233663-aa29-46c6-9c1d-227efa290485",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/42233663-aa29-46c6-9c1d-227efa290485",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1040e5d-7cfd-4745-9a80-3ef61449e462","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58394","PortSpecifier":{"PortValue":58394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45e2a910-f019-4a3e-ac59-295032e8290a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58394","PortSpecifier":{"PortValue":58394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973136,"nanos":345311447},"http":{"id":"45e2a910-f019-4a3e-ac59-295032e8290a","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45e2a910-f019-4a3e-ac59-295032e8290a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39712","PortSpecifier":{"PortValue":39712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39712","PortSpecifier":{"PortValue":39712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973136,"nanos":386943212},"http":{"id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b02a77db-0c71-4bb3-862b-0d2f9c559a2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58404","PortSpecifier":{"PortValue":58404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:58404","PortSpecifier":{"PortValue":58404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973136,"nanos":423732153},"http":{"id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","method":"GET","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KKYGT2pBw7B21Ejt_vvxiSrfWFiW35z87I2Y5pwpaogX2QNQZ14Vb4XgnjNV"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KKYGT2pBw7B21Ejt_vvxiSrfWFiW35z87I2Y5pwpaogX2QNQZ14Vb4XgnjNV\"}"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"070cb20e-8dcf-465e-b6f0-8066f7588418","keyName":"e2e-auth-iso-a-0b9596","subscription":"e2e-auth-iso-72eced","tenant":"e2e-shared-a-452240","userId":"070cb20e-8dcf-465e-b6f0-8066f7588418","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-72eced"}
{"level":"info","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc56e7a2-0eaf-4c69-a755-c754d2e78732","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39304","PortSpecifier":{"PortValue":39304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39304","PortSpecifier":{"PortValue":39304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973155,"nanos":708462500},"http":{"id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f73aaeb3-7b84-4f89-96ac-0334e5760d25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"791f968c-640c-404a-9fd2-3f941da0562e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39688","PortSpecifier":{"PortValue":39688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"791f968c-640c-404a-9fd2-3f941da0562e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"791f968c-640c-404a-9fd2-3f941da0562e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39688","PortSpecifier":{"PortValue":39688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973155,"nanos":749425796},"http":{"id":"791f968c-640c-404a-9fd2-3f941da0562e","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"791f968c-640c-404a-9fd2-3f941da0562e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"791f968c-640c-404a-9fd2-3f941da0562e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"791f968c-640c-404a-9fd2-3f941da0562e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"791f968c-640c-404a-9fd2-3f941da0562e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"791f968c-640c-404a-9fd2-3f941da0562e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39694","PortSpecifier":{"PortValue":39694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c22415c-9f47-470d-96ce-21d12a2040d3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:39694","PortSpecifier":{"PortValue":39694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973155,"nanos":782378500},"http":{"id":"7c22415c-9f47-470d-96ce-21d12a2040d3","method":"GET","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l2Q0ADtcAbWN8lcq_nba7tzsnW8i9Nrnl9DJnO89dKpQuRQhM73KTrHOKTwW"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l2Q0ADtcAbWN8lcq_nba7tzsnW8i9Nrnl9DJnO89dKpQuRQhM73KTrHOKTwW\"}"}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c22415c-9f47-470d-96ce-21d12a2040d3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973175,"nanos":80365906},"http":{"id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c7fbb5-e03a-4c00-a027-823c52c886f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42894","PortSpecifier":{"PortValue":42894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42894","PortSpecifier":{"PortValue":42894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973175,"nanos":111074241},"http":{"id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42cffb56-faad-4cdd-bcb6-6e6c722040ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12575812-cb10-4a51-9481-02402d6146cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34782","PortSpecifier":{"PortValue":34782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12575812-cb10-4a51-9481-02402d6146cd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12575812-cb10-4a51-9481-02402d6146cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34782","PortSpecifier":{"PortValue":34782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973175,"nanos":143645880},"http":{"id":"12575812-cb10-4a51-9481-02402d6146cd","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12575812-cb10-4a51-9481-02402d6146cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12575812-cb10-4a51-9481-02402d6146cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12575812-cb10-4a51-9481-02402d6146cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12575812-cb10-4a51-9481-02402d6146cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12575812-cb10-4a51-9481-02402d6146cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42904","PortSpecifier":{"PortValue":42904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42904","PortSpecifier":{"PortValue":42904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973175,"nanos":178696255},"http":{"id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7eb8918-e907-4fbf-b55a-46e565f0e75f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34690","PortSpecifier":{"PortValue":34690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c08e87f4-9274-408d-90ba-70a20cf4b382","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34690","PortSpecifier":{"PortValue":34690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973192,"nanos":320353522},"http":{"id":"c08e87f4-9274-408d-90ba-70a20cf4b382","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c08e87f4-9274-408d-90ba-70a20cf4b382","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47422","PortSpecifier":{"PortValue":47422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a03f4553-1de4-439d-889e-8a5dafe820f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47422","PortSpecifier":{"PortValue":47422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973192,"nanos":358308264},"http":{"id":"a03f4553-1de4-439d-889e-8a5dafe820f2","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a03f4553-1de4-439d-889e-8a5dafe820f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","method":"GET","path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973192,"nanos":402074322},"http":{"id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","method":"GET","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d6754a-5559-42f7-9469-c2231aa8a4b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7713f25e-af87-467d-897f-c592de25013a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7713f25e-af87-467d-897f-c592de25013a","method":"GET","path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7713f25e-af87-467d-897f-c592de25013a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973192,"nanos":431318845},"http":{"id":"7713f25e-af87-467d-897f-c592de25013a","method":"GET","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7713f25e-af87-467d-897f-c592de25013a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7713f25e-af87-467d-897f-c592de25013a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bda6414a-4f09-44cb-9522-afdaca9e3818",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7713f25e-af87-467d-897f-c592de25013a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7713f25e-af87-467d-897f-c592de25013a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7713f25e-af87-467d-897f-c592de25013a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58798218-5d07-4baf-891c-44e42c379b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34722","PortSpecifier":{"PortValue":34722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58798218-5d07-4baf-891c-44e42c379b92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58798218-5d07-4baf-891c-44e42c379b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34722","PortSpecifier":{"PortValue":34722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973211,"nanos":674721361},"http":{"id":"58798218-5d07-4baf-891c-44e42c379b92","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58798218-5d07-4baf-891c-44e42c379b92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58798218-5d07-4baf-891c-44e42c379b92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58798218-5d07-4baf-891c-44e42c379b92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58798218-5d07-4baf-891c-44e42c379b92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58798218-5d07-4baf-891c-44e42c379b92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44982","PortSpecifier":{"PortValue":44982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44982","PortSpecifier":{"PortValue":44982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973211,"nanos":708490671},"http":{"id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/auth-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce725bb-cdc9-434f-b02e-be1d89b1b68f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34726","PortSpecifier":{"PortValue":34726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11568930-1951-4ec7-8d7b-9aab3fba6505","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34726","PortSpecifier":{"PortValue":34726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973211,"nanos":742714113},"http":{"id":"11568930-1951-4ec7-8d7b-9aab3fba6505","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CT7zFs22EFHHhsb_pfObWqZuSC2xiPZ9CdHxDVJZBppaPHEIUfneqVjD2qB"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CT7zFs22EFHHhsb_pfObWqZuSC2xiPZ9CdHxDVJZBppaPHEIUfneqVjD2qB\"}"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"975fe26e-6222-4279-be5b-b9dab2ad8881","keyName":"e2e-auth-iso-a-f2e24e","subscription":"e2e-auth-iso-a6efc6","tenant":"e2e-shared-a-452240","userId":"975fe26e-6222-4279-be5b-b9dab2ad8881","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/auth-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a6efc6"}
{"level":"info","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11568930-1951-4ec7-8d7b-9aab3fba6505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9114a05079fc9dd2ac6f942b200728512e452a805bfaed3a6311a1dc726cc14"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf59bb485948c40d023109434d9c3c0b7756318653d8539b9a52abad5b8d11c"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40add5da09600b3109b380ba1f87c215bdd1a1f4d4da6cb91b3d0148ef6dd82"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d511ef0bb13a0842ee18189d10639c07d3a35df83ba682c48dbf7ecc7b11ce30"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298838c5ca0bb58e5993df843675b21b3cea8af248415e6e4a3ad75bd171dc66"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974a98dbe226fe17a9daf255b5b1c20a1ea6ab94f1a3ceece08c71ba2de63aad"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee62a86182dd78a7a52b498d68cbcec9069b113109559a60e58b5ac89f1359f3"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a728094026b193701281f0c6e2315c351371396dfbf74e64e306394940e51154"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bf50eb44ea67e8d5cc86374050e4a17af01c6a5725410da993a36b14f905ec9"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/040fa366f886dff8d1227d2fe424ff9e436b34a4126be5eb2987bb8842ca72b5"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9e5feb44af866f7a29e34309c343a97ecc9031a769bda97cbeacb930c0fa82"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9a3f5285198be420cb0943c8c42decbb16a8933c5ab076e35beb5e58f7096a2"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81deeaf11402127bf11e4beb96a08c5c923e922a9936cd1c624e2d9d4547b665"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e329ec2d07a0a25a27fec09514a948ca57894bcb04431095501321d75a897883"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d460493e5667e5c7686a395c56ae47266d4acb9aa8e155b2f45aa308c5c19b2"}
{"level":"info","ts":"2026-07-13T20:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac229024943ff82a7c7222f843a4da7394dc7ba7266c53ffa6d2ad9a5d06bf63"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"error","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"debug","ts":"2026-07-13T20:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"error","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"info","ts":"2026-07-13T20:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"debug","ts":"2026-07-13T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"error","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:07:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"info","ts":"2026-07-13T20:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"}
{"level":"debug","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:07:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:07:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"debug","ts":"2026-07-13T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e239bb744ad357288d92a917e9a1f5cba67452f6e5b889305fc98da0787d114e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e239bb744ad357288d92a917e9a1f5cba67452f6e5b889305fc98da0787d114e"}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"debug","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"debug","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2"}
{"level":"debug","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"}
{"level":"debug","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"info","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"info","ts":"2026-07-13T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75ff835c-200e-4f36-b321-c7f76658efa5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973284,"nanos":791651209},"http":{"id":"75ff835c-200e-4f36-b321-c7f76658efa5","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/sub-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ff835c-200e-4f36-b321-c7f76658efa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55490","PortSpecifier":{"PortValue":55490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55490","PortSpecifier":{"PortValue":55490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973284,"nanos":833563997},"http":{"id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/sub-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b5524b-68ea-4b9a-a4ad-e20c0b175776","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddeedff5-a3e5-4873-b923-35df8e14240c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973284,"nanos":870018421},"http":{"id":"ddeedff5-a3e5-4873-b923-35df8e14240c","method":"GET","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j2nPvuhzXQ3sdzp8_Lhenn7QEoVofxEVBMTirLp4YQ2Lce0Q6gz9y1Oco0AJ"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j2nPvuhzXQ3sdzp8_Lhenn7QEoVofxEVBMTirLp4YQ2Lce0Q6gz9y1Oco0AJ\"}"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"104bd1c9-d28b-4012-8a62-7ff1f21e84db","keyName":"e2e-sub-iso-eab520","subscription":"e2e-a-only-b8828c","tenant":"e2e-shared-a-452240","userId":"104bd1c9-d28b-4012-8a62-7ff1f21e84db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/sub-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b8828c"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddeedff5-a3e5-4873-b923-35df8e14240c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73d15dbf-7e67-4c59-b53a-13d39b258079","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973284,"nanos":911670049},"http":{"id":"73d15dbf-7e67-4c59-b53a-13d39b258079","method":"GET","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I6Asu4t7o25SHZQb_dZTptFttDnpsqMJ0w7V7RDCN8FR5OI5Ia0wgQm9SVrE"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I6Asu4t7o25SHZQb_dZTptFttDnpsqMJ0w7V7RDCN8FR5OI5Ia0wgQm9SVrE\"}"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c44df02-3f6a-4afa-bbea-be8b70a33132","keyName":"e2e-sub-iso-2432c6","subscription":"e2e-b-only-b8828c","tenant":"e2e-shared-b-83eaac","userId":"2c44df02-3f6a-4afa-bbea-be8b70a33132","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/sub-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b8828c"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73d15dbf-7e67-4c59-b53a-13d39b258079","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52929b18-48a1-4a50-8973-428e59cd0607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51778","PortSpecifier":{"PortValue":51778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52929b18-48a1-4a50-8973-428e59cd0607","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52929b18-48a1-4a50-8973-428e59cd0607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51778","PortSpecifier":{"PortValue":51778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973305,"nanos":425332917},"http":{"id":"52929b18-48a1-4a50-8973-428e59cd0607","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52929b18-48a1-4a50-8973-428e59cd0607","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52929b18-48a1-4a50-8973-428e59cd0607","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/sub-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52929b18-48a1-4a50-8973-428e59cd0607","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52929b18-48a1-4a50-8973-428e59cd0607","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52929b18-48a1-4a50-8973-428e59cd0607","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178be328-022e-439e-9f1a-4462e4ae207f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"178be328-022e-439e-9f1a-4462e4ae207f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178be328-022e-439e-9f1a-4462e4ae207f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973305,"nanos":461207945},"http":{"id":"178be328-022e-439e-9f1a-4462e4ae207f","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"178be328-022e-439e-9f1a-4462e4ae207f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"178be328-022e-439e-9f1a-4462e4ae207f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/sub-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178be328-022e-439e-9f1a-4462e4ae207f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178be328-022e-439e-9f1a-4462e4ae207f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178be328-022e-439e-9f1a-4462e4ae207f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51790","PortSpecifier":{"PortValue":51790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78f42962-7cad-4b59-9cf4-73518f38548e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51790","PortSpecifier":{"PortValue":51790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973305,"nanos":492121694},"http":{"id":"78f42962-7cad-4b59-9cf4-73518f38548e","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rxYU3ttZH0P91IMW_x34YLpkglk6QzUWMc8ehSjBIvSVEG58wlvMvEDiIktX"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rxYU3ttZH0P91IMW_x34YLpkglk6QzUWMc8ehSjBIvSVEG58wlvMvEDiIktX\"}"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"efb74b0e-b3ac-4b55-a4a8-3f3f48f546f4","keyName":"e2e-sub-iso-448af9","subscription":"e2e-shared-sub-29f386","tenant":"e2e-shared-a-452240","userId":"efb74b0e-b3ac-4b55-a4a8-3f3f48f546f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/sub-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-29f386"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f42962-7cad-4b59-9cf4-73518f38548e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56820","PortSpecifier":{"PortValue":56820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:56820","PortSpecifier":{"PortValue":56820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973305,"nanos":518665108},"http":{"id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QzskBcBaJvZG3Rsy_6YPSCCwbunxxrXnNifhrzVgL4SnATBgOOIxnWbmNvja"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QzskBcBaJvZG3Rsy_6YPSCCwbunxxrXnNifhrzVgL4SnATBgOOIxnWbmNvja\"}"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1015241b-f8b9-4d3f-b0a5-6509314449d6","keyName":"e2e-sub-iso-3d62e7","subscription":"e2e-shared-sub-29f386","tenant":"e2e-shared-b-83eaac","userId":"1015241b-f8b9-4d3f-b0a5-6509314449d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/sub-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-29f386"}
{"level":"info","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc03b74e-ab71-4f9d-a6bc-ddad6cc4ec9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22cec0dec498f58c8189080c9ef2c0fcbc147d71d59f12d5416c6f357d7d8475"}
{"level":"info","ts":"2026-07-13T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d9acfc7ac937e352b291b8d5756cc8b1fdbda51dcecacca2eaf6d69d3a64f9a"}
{"level":"info","ts":"2026-07-13T20:08:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7562d6eb10180afb804b4460ecedb22ae32b033dd60f304dc82d7c14e1464d7a"}
{"level":"info","ts":"2026-07-13T20:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42b7139d99a1def05fa57b0ad2f6833a1f0b8ba9fe3b8c8c31906aad5f37c7d4"}
{"level":"info","ts":"2026-07-13T20:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4fd6ab22f1e490b9249c5457dc201c2610e133913ef65b44ad2f1762e71cd7"}
{"level":"info","ts":"2026-07-13T20:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4854b2bafb8a621fe94fa43bd98fedda0a3fa106aebe405c9322db5852c5db2"}
{"level":"info","ts":"2026-07-13T20:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b597d87aa4e7dc24c984d6c12b5c6d89f71e4e39789cb6086549c245a3efc3"}
{"level":"info","ts":"2026-07-13T20:08:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce449fbc55ad64b4e7b3ff5e06945b9b62b9f14f9cb12f83503f7fac32ec9ff"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ab7c9cc3e70b49e2739392631e8f0259fc06ac86c60b8c7e990d81a41ca3b19"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13273e556a9d7a52692c6f9d3914572e04199f1e9ddb2cdaf984920c27c8bdf1"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e32389f7a5fac95b52623189d22cbc13d16004d6a1a0b71115d2635064537f46"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aaa8e152cf5dd3eb7f81b380a7f8e027dee0b2027825f180b58ff98e3352b6f"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/591566aa075ebed406a13ea9f3a858d3c82d0a33dcbc8b70f93738884660c2a2"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e44eab25ef44aa22e7ddc36abf1c847ac2148617109f4c95b6e9fa062fc238a"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f068cb02273e997957416095c9d5ceb831fbcc2c5906c2b9f2ef5202d8f295"}
{"level":"info","ts":"2026-07-13T20:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d9e26b8edea18905248d49e80483d777a2599c036a90eed9b76692406bdc0bf"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"debug","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"info","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"}
{"level":"error","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"error","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"error","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"}
{"level":"debug","ts":"2026-07-13T20:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e239bb744ad357288d92a917e9a1f5cba67452f6e5b889305fc98da0787d114e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e239bb744ad357288d92a917e9a1f5cba67452f6e5b889305fc98da0787d114e"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c"}
{"level":"debug","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"error","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"error","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"error","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:09:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"error","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"debug","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"}
{"level":"info","ts":"2026-07-13T20:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973381,"nanos":544792409},"http":{"id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d93bbcab-2fbe-417a-8316-5bd1c7f675af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55978","PortSpecifier":{"PortValue":55978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55978","PortSpecifier":{"PortValue":55978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973381,"nanos":585800079},"http":{"id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f6c77cf-8cb6-42ce-81b9-833e78d76db1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973381,"nanos":624699433},"http":{"id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv\"}"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","subscription":"e2e-rate-iso-a-f15b0c","tenant":"e2e-shared-a-452240","userId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-f15b0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f15b0c"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","selected_subscription":"e2e-rate-iso-a-f15b0c","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-f15b0c@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b104afe9-5419-4d2c-80a4-88b2020ab47d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52280","PortSpecifier":{"PortValue":52280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c63c47a-c71b-4fa8-8755-1870954d169c","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52280","PortSpecifier":{"PortValue":52280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973382,"nanos":684066298},"http":{"id":"6c63c47a-c71b-4fa8-8755-1870954d169c","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv\"}"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","subscription":"e2e-rate-iso-a-f15b0c","tenant":"e2e-shared-a-452240","userId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-f15b0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f15b0c"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","selected_subscription":"e2e-rate-iso-a-f15b0c","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-f15b0c@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c63c47a-c71b-4fa8-8755-1870954d169c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973383,"nanos":718381653},"http":{"id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dMlNe6edCUFNH9Rz_jvP6gkJItlpkaa7uUh6URMaxoKiTKd5EtGSGfQslaIv\"}"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","subscription":"e2e-rate-iso-a-f15b0c","tenant":"e2e-shared-a-452240","userId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-f15b0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f15b0c"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7263a9d-c14b-4808-a4f8-1d560a7bc2f6","keyName":"e2e-rate-a-f15b0c","selected_subscription":"e2e-rate-iso-a-f15b0c","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-f15b0c@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f15b0c","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f51969a-1231-4c88-9b57-fae7bae37dc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35776","PortSpecifier":{"PortValue":35776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35776","PortSpecifier":{"PortValue":35776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973392,"nanos":380629669},"http":{"id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b3649b8-35a6-49eb-84cd-edf61d569ba8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41884","PortSpecifier":{"PortValue":41884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96fa299f-dc80-48f1-8750-107a89633e8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:41884","PortSpecifier":{"PortValue":41884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973392,"nanos":414026636},"http":{"id":"96fa299f-dc80-48f1-8750-107a89633e8b","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"]}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/534fc34ee41d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0fdd47f1-1c93-4279-a353-0e63c0d09dba"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ec5d5697-ab7b-4314-ad04-744a8e5ae528","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fa299f-dc80-48f1-8750-107a89633e8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35790","PortSpecifier":{"PortValue":35790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149a9b93-73d7-4c78-958c-49dca2e22853","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35790","PortSpecifier":{"PortValue":35790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973392,"nanos":449641433},"http":{"id":"149a9b93-73d7-4c78-958c-49dca2e22853","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149a9b93-73d7-4c78-958c-49dca2e22853","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35800","PortSpecifier":{"PortValue":35800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35800","PortSpecifier":{"PortValue":35800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973393,"nanos":484091321},"http":{"id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7a11ec3-e52f-48f2-81ef-71e40d7877d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973394,"nanos":517029437},"http":{"id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68664948-58cf-4c5f-a4d7-e9ba6c581dbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973395,"nanos":551958894},"http":{"id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e53f495f-97b5-9cae-9a3b-7eec47bd2ad8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35836","PortSpecifier":{"PortValue":35836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35836","PortSpecifier":{"PortValue":35836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973396,"nanos":587372497},"http":{"id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6266c0c-ae5d-4f84-99f4-b9eeb4ea6ad0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35848","PortSpecifier":{"PortValue":35848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35848","PortSpecifier":{"PortValue":35848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973397,"nanos":622376249},"http":{"id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9b6e0de-0043-4d7a-9fcf-b8966905b259","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973398,"nanos":656768331},"http":{"id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12c3fc46-0123-4086-ab97-2c84d55cbb75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973399,"nanos":690610342},"http":{"id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:09:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f2b949-1518-4dc9-bc49-06ec739a9d51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49808","PortSpecifier":{"PortValue":49808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49808","PortSpecifier":{"PortValue":49808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973400,"nanos":726960081},"http":{"id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:10:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555dbd87-92d4-4fa9-aab8-df6408b84e76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49818","PortSpecifier":{"PortValue":49818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37decdd2-ee04-4022-925a-e1b9e1e32972","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49818","PortSpecifier":{"PortValue":49818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973401,"nanos":765689916},"http":{"id":"37decdd2-ee04-4022-925a-e1b9e1e32972","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:10:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37decdd2-ee04-4022-925a-e1b9e1e32972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb40f398-dae3-4931-8907-357d38062b91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49830","PortSpecifier":{"PortValue":49830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb40f398-dae3-4931-8907-357d38062b91","method":"POST","path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions","host":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb40f398-dae3-4931-8907-357d38062b91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49830","PortSpecifier":{"PortValue":49830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973402,"nanos":800246655},"http":{"id":"bb40f398-dae3-4931-8907-357d38062b91","method":"POST","headers":{":authority":"e2e-shared-a-452240.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-452240/rate-test-model-452240/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p1bjMNfBvJidKml8_x9A6Zx7Vnr515hCrQDsDljgGpzEtadonJ0tfwKZkrBo\"}"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","subscription":"e2e-rate-iso-a-2c332e","tenant":"e2e-shared-a-452240","userId":"56240cb1-f594-4349-a926-64e73a61ff92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\",\"requestedSubscription\":\"e2e-rate-iso-a-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-452240.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb40f398-dae3-4931-8907-357d38062b91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-452240/rate-test-model-452240\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2c332e"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40f398-dae3-4931-8907-357d38062b91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56240cb1-f594-4349-a926-64e73a61ff92","keyName":"e2e-rate-a-2c332e","selected_subscription":"e2e-rate-iso-a-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-a-452240/e2e-rate-iso-a-2c332e@ai-tenant-e2e-shared-a-452240/rate-test-model-452240","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-452240","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2c332e","namespace":"ai-tenant-e2e-shared-a-452240","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb40f398-dae3-4931-8907-357d38062b91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb40f398-dae3-4931-8907-357d38062b91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e84b02-8449-4002-9638-53b1205ab22b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51002","PortSpecifier":{"PortValue":51002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32e84b02-8449-4002-9638-53b1205ab22b","method":"POST","path":"/ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac/v1/completions","host":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e84b02-8449-4002-9638-53b1205ab22b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51002","PortSpecifier":{"PortValue":51002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783973402,"nanos":836603170},"http":{"id":"32e84b02-8449-4002-9638-53b1205ab22b","method":"POST","headers":{":authority":"e2e-shared-b-83eaac.apps.03d6c2da-bfe2-4c20-914a-534fc34ee41d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XYtRR27CtbfldIzK_C9eKjeEmVRrWJj0PnkxwpnuGPQGVpF8WfDqV5SKzyOH"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XYtRR27CtbfldIzK_C9eKjeEmVRrWJj0PnkxwpnuGPQGVpF8WfDqV5SKzyOH\"}"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2b4919a-1b9e-4e91-ab0c-24e4c7091f7b","keyName":"e2e-rate-b-2c332e","subscription":"e2e-rate-iso-b-2c332e","tenant":"e2e-shared-b-83eaac","userId":"e2b4919a-1b9e-4e91-ab0c-24e4c7091f7b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac\",\"requestedSubscription\":\"e2e-rate-iso-b-2c332e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-83eaac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-83eaac","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2c332e","namespace":"ai-tenant-e2e-shared-b-83eaac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32e84b02-8449-4002-9638-53b1205ab22b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-2c332e"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e84b02-8449-4002-9638-53b1205ab22b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e2b4919a-1b9e-4e91-ab0c-24e4c7091f7b","keyName":"e2e-rate-b-2c332e","selected_subscription":"e2e-rate-iso-b-2c332e","selected_subscription_key":"ai-tenant-e2e-shared-b-83eaac/e2e-rate-iso-b-2c332e@ai-tenant-e2e-shared-b-83eaac/rate-test-model-83eaac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-83eaac","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2c332e","namespace":"ai-tenant-e2e-shared-b-83eaac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e84b02-8449-4002-9638-53b1205ab22b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e84b02-8449-4002-9638-53b1205ab22b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21cef218806a484146f5d3032f014a054189e33782d0d476546bb4ebbcfd9631"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/320e5197375bc15242b2c403d7598ce4041c4b4e2e3f932a1058424421a64c13"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2847a797e51c601ac1c7fa61c74df41b7b8d59eac93bfdabd35840bb70c143c"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e1dd39dfafe1bc28c72170d72592d58a97ba0d68fe72d1a29398cc407201bb"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7291e18bbfb1a52a87d56727257f143dad20b6ca66ad9234352464e5827a4047"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe495fb3a20ffe4305e880d4e96451b9009bdb062188c5c186580376ad9550db"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b432115016824903abc8fb28a2d5fa8f421efb65b6e79d4aeb5b6a9cb983c281"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/937db17ce321453beb504bbd1ef52164623dcbb10730405c44af3b2d9ff6488e"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9cd45ae4ed7a231d66fd12262f24f603cbf55f91cdbf4349413572c519d4b72"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c269e36484b55bca08eb8f6bba14d14b9f9dab7e0beb0a32377246b03d7fee95"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32a9e057a299a39db75f214f6977f9854b84d5ae2073d2c94b80fe1d90b8ce04"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aa3b2c5d8e3f9b959ac14a96ecb397977a3b68d8e3faea07e418e7bee4b2852"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e6f97458dcdbb35852a05ed87d157791eb0419b2af7bbce1ff3684b4fd02feb"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97485d9da420421b57eae0169256de390aaf34c6cb14937cd274b0ed51d26b55"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9862f526d1e4e3f7530aa24db9634368eedba0763f04d7e378e3655a362e93c6"}
{"level":"info","ts":"2026-07-13T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/742f45cb4a26ef7e89320f9c01d7765d0280b89954f426124ccbe324a4f81e10"}
{"level":"info","ts":"2026-07-13T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5200300cc37b291811a3f855d1896752c5dc2dbb1f0a530675c76e460b95b1ad"}
{"level":"info","ts":"2026-07-13T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e239bb744ad357288d92a917e9a1f5cba67452f6e5b889305fc98da0787d114e"}
{"level":"info","ts":"2026-07-13T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baeb6288a0145011d9b04253d08653b957a999f104e36c0bf0f77dd5878bc04a"}
{"level":"info","ts":"2026-07-13T20:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f00486348c0a47f5930d481db6e8e810d703ab2a2ef3952f2a3d446008b2961c"}
{"level":"info","ts":"2026-07-13T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dc8b94046522890813f5d297f72716f3aa12ab01382309b4a555429dcd52a87"}
{"level":"info","ts":"2026-07-13T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0657a718a32ab2c4c84fab6147bac03cf04a4ac8ac2dd33a1bf7c2b887ba1fcf"}
{"level":"info","ts":"2026-07-13T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77bc78f4b3f50085cd9b618cf911678f162b39c83979c7e4fbde478224a7fbc4"}
{"level":"info","ts":"2026-07-13T20:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4917362a93b39a0e8ac7a01cd6a02b349b0002bc4d0189ca07dcaba94080ab9"}